The World Economic Forum (WEF) warns of aviation risks stemming from cyber vulnerabilities that threaten both operational and regional stability. The WEF’s recent Aviation Sustainability report highlights the increasing threat that cyber-attacks pose to the aviation industry. As cyber incidents become more sophisticated, they have the potential to disrupt flight operations, compromise passenger safety, and […]
Claroty has released a report highlighting that 82% of attacks on cyber-physical systems (CPS) targeted remote access protocols. The findings emphasize a significant focus by hacktivists on human-machine interfaces (HMIs) and supervisory control and data acquisition (SCADA) systems. These systems are critical components of industrial control networks, often playing a pivotal role in sectors such […]
A recent investigation has revealed the alarming use of a Cisco zero-day vulnerability in Interlock ransomware attacks. This particular flaw in the Firewall Management Center (FMC) software has been actively exploited since late January, posing significant risks to enterprises relying on Cisco’s security infrastructure. Amazon uncovered evidence linking the exploitation to Russian actors, marking another […]
Interlock ransomware actively exploits a Cisco zero-day vulnerability, posing significant risks to cybersecurity. Amazon threat intelligence has detected an active campaign leveraging this zero-day in Cisco Secure Firewall Management Center (FMC). The vulnerability, identified by the CVE-2026-20131 identifier, has been assigned a critical 10.0 CVSS score, underscoring its potential impact. Other vulnerabilities, CVE-2026-0953 and CVE-2026-20963, […]
Russia turns Vienna into its largest Western spy hub, according to Western intelligence reports. Russian surveillance operations in the Austrian capital have expanded over the past two years, utilizing diplomatic sites and advanced satellite technology. These efforts target NATO communications and extend across the Middle East and Africa, echoing Cold War-era tactics. A senior European […]
A critical vulnerability, identified as CVE-2026-22730, has been discovered in the MariaDB vector store utilized by Spring AI. This spring ai flaw allows for SQL injection, posing significant security risks. Cybersecurity experts at SecureLayer7 have highlighted the potential exploitation of this flaw by malicious actors to compromise data integrity and confidentiality. These actors could potentially […]
Hacktivists fuel the cybercrime rise as the ongoing conflict in Iran leads to a dramatic 245% surge in malicious online activities. Cybersecurity experts highlight the strategic use of proxy services by hacktivists from Russia and China. These services facilitate billions of connection attempts designed specifically to abuse networks and bypass security measures. This trend underscores […]
Russia-linked APT groups have intensified efforts against Ukrainian targets by deploying the DRILLAPP backdoor, leveraging Microsoft Edge debugging for discreet espionage. Uncovered in February 2026, the new campaign by Laundry Bear, also known as UAC-0190 or Void Blizzard, mirrors previous Russian-aligned cyber-operations. DRILLAPP employs LNK files to create HTML files that execute obfuscated scripts, exploiting […]
A novel cyberattack sees livechat hijacked by phishers seeking to extract personal data through deceptive means. Assailants exploit the SaaS platform LiveChat, manipulating its customer service tools to create convincing phishing schemes. Victims, targeted by phishing emails mimicking services like PayPal and Amazon, are lured into engaging with what they believe are legitimate live support […]
The recent Stryker Microsoft breach led to tens of thousands of device erasures within the medical technology company’s network. Hackers exploited Stryker’s Microsoft environment, wiping data from nearly 80,000 employee devices without deploying malware. Despite the significant impact, medical devices remained unaffected and operational. Customers, however, faced disruptions as electronic ordering systems went offline, necessitating […]
Cybersecurity researchers have uncovered a sophisticated attack campaign exploiting Microsoft Teams and Quick Assist to deploy a stealthy malware known as A0Backdoor. This threat, attributed to groups alias Blitz Brigantine, Storm-1811, and STAC5777, has connections to Black Basta ransomware. Active between August 2025 and February 2026, this operation zeroes in on finance and healthcare professionals. […]
The DrillApp backdoor targets Ukraine in a sophisticated cyber-espionage campaign, exploiting Microsoft Edge debugging to operate stealthily. According to a report by S2 Grupo’s LAB52, the operation, uncovered in February 2026, is suspected to involve Russian-linked threat actors. These cybercriminals are believed to be aligned with Laundry Bear, also known as UAC-0190 or Void Blizzard, […]