France’s foreign ministry pushed back against claims made by Telegram’s CEO, stating it “categorically rejects” accusations that French intelligence requested the platform to suppress conservative voices in Romania ahead of national elections. The ministry’s response follows a statement from Pavel Durov, who alleged that French authorities attempted to influence political discourse in the country through […]
SK Telecom, one of South Korea’s largest telecommunications providers, suffered a major data breach exposing nearly 26.69 million international mobile subscriber identity (IMSI) records, according to a disclosure by the Ministry of Science and ICT. The breach, first reported last month, has raised concerns over the security of mobile communications and subscriber data in the […]
Cybercriminals are targeting the healthcare sector with a new wave of phishing scams involving fake medical clinics, according to GBHackers News. The attacks have contributed to a sharp rise in data breaches across the industry, with 92% of healthcare organizations reporting incidents that compromised more than 276 million patient records. On average, 758,000 records are […]
Adidas has confirmed a cybersecurity breach that resulted in unauthorized access to customer data, the company disclosed in a recent statement. The sportswear giant did not specify the scale of the attack or the exact nature of the compromised information. The incident highlights growing concerns over data security in the retail and apparel sectors, which […]
A coordinated phishing campaign exploiting shared cybercriminal infrastructure has emerged as a growing threat to enterprise Microsoft 365 users, according to researchers at Trustwave. The operation connects the Tycoon2FA Phishing-as-a-Service (PhaaS) platform—active since August 2023—with the threat group Storm-1575, also known as Dadsec. Attackers employ adversary-in-the-middle (AiTM) techniques to bypass multi-factor authentication, distributing phishing emails […]
Two malicious Python packages uploaded to the Python Package Index (PyPI) are targeting Windows and Linux systems, according to Hackread. The attack involves backdoored libraries designed to infiltrate developer environments. One of the packages mimics “colorama,” a legitimate and widely used Python tool for color formatting in terminal output. The second imitates “colorizr,” a similarly […]
Google has issued a warning about a financially motivated cybercriminal group targeting Salesforce customers through a vishing and extortion campaign. The attackers are using voice phishing tactics to deceive victims into revealing sensitive information, which is then leveraged to gain unauthorized access to Salesforce accounts. Once inside, the threat actors reportedly extort the victims, demanding […]
Microsoft addressed 66 vulnerabilities in its latest Patch Tuesday release, with 10 of the flaws classified as “critical,” the company disclosed. Among the patched issues, two carry a Common Vulnerability Scoring System (CVSS) rating of 8.8, signaling high severity. Notably, one of these high-rated vulnerabilities is currently under active exploitation, heightening the urgency for users […]
Google and Mozilla have issued security updates addressing four high-severity memory-related vulnerabilities in their respective web browsers, Chrome and Firefox. The patches, released separately by the two companies, are designed to mitigate risks stemming from memory bugs that could be exploited to compromise user systems or cause application instability. The updates reflect ongoing efforts by […]
The Trump administration plans to again delay enforcement of its TikTok ban, offering the popular video-sharing platform a temporary reprieve. Trump extends TikTok reprieve under the same legislation that initially sought to block the app — the Protecting Americans from Foreign Adversary Controlled Applications Act. This law targets platforms perceived to be under the influence […]
A proof-of-concept exploit developed by Cato Networks has demonstrated how Jira tickets turn attack vectors when manipulated through prompt injection techniques. The exploit reveals how attackers can leverage seemingly routine external inputs to compromise internal artificial intelligence tools integrated within enterprise systems. By embedding malicious prompts in Jira tickets, attackers can manipulate AI-driven services that […]
The Androxgh0st Botnet hits again, this time targeting servers at U.S. universities as it broadens its digital footprint. Security researchers have observed increased activity from the botnet, which is now exploiting vulnerable infrastructure within academic institutions. These attacks raise concerns over the growing sophistication and persistence of threat actors operating this malware. The botnet reportedly […]