The U.S. Federal Communications Commission has announced a sweeping move as the FCC bans foreign drones and essential components, citing growing national security threats. On Monday, the agency expanded its Covered List to include uncrewed aircraft systems (UAS) and critical UAS parts manufactured in foreign countries. The update also covers foreign-produced communications and video surveillance […]
Authorities in Sweden, working with Spanish counterparts and Europol, carried out a joint operation between November 28 and 29 that disrupted a violent criminal network suspected of overseeing large-scale illegal gambling and money laundering. The group, active in the Stockholm region, is believed to handle criminal proceeds both for itself and for other organized crime […]
The Iranian Infy APT resurfaces with new malware operations, breaking nearly five years of silence since its last known cyber campaigns. Security researchers at SafeBreach recently detected renewed activity linked to the Infy group, also known by the alias “Prince of Persia.” In its previous campaigns, the group targeted entities in Sweden, the Netherlands and […]
The latest edition of the weekly cybersecurity digest, SecurityAffairs Round 555, delivers a comprehensive overview of global cyber threats, vulnerabilities, and major incidents impacting both public and private sectors. Top stories include the U.S. Department of Justice’s indictment of 54 individuals in a wide-scale ATM jackpotting scheme and Denmark’s confirmation that Russia orchestrated destructive cyberattacks […]
A new report highlights how a Cisco zero-day hits email security appliances, raising fresh concerns for enterprise infrastructure. Security researchers observed the vulnerability being actively exploited in the wild, driving urgent patching efforts. The flaw, now identified as CVE-2025-40602, is just one of several disclosed issues named in the report. Other notable vulnerabilities include CVE-2025-43529 […]
Popular workflow automation tool n8n is under scrutiny after security researchers uncovered a critical remote code execution vulnerability rated the maximum 10.0 on the CVSS scale. The platform, widely adopted for automating business processes, was hit by the flaw, which allows attackers to gain full control of affected servers. Tracked as CVE-2025-68613, the exploit can […]
A recently disclosed advisory has exposed critical vulnerabilities in Exim, one of the most widely deployed mail transfer agents, stemming from an Exim patch failure. Security researchers, including Andrew Fasano of the National Institute of Standards and Technology, detailed how a flawed fix and SQL injection flaw opened the door to severe heap overflows, putting […]
A critical vulnerability tracked as CVE-2025-11953 exposes the React Native Metro server, used within the React Native Community CLI, to remote code execution. With a CVSS severity score of 9.8, the flaw allows attackers to execute arbitrary system commands through an operating system command injection issue in the Metro development server. The vulnerability poses a […]
The Department of Agriculture, Environment and Rural Affairs (DAERA) has launched a Rural Data Hub aimed at strengthening data-driven decision-making in Northern Ireland. As DAERA launches a rural data platform with advanced mapping and dashboard tools, local authorities and policymakers will gain access to detailed information at small-area levels. The hub consolidates various datasets, offering […]
The U.S. Department of Justice has charged 54 individuals in connection with a wide-reaching ATM hacking operation that used Ploutus malware to drain machines across the country. The sweeping indictment targets a group tied to Tren de Aragua, a designated Foreign Terrorist Organization, alleging the scheme generated millions to support its leadership. Prosecutors revealed the […]
Japan forces Apple and Google to open their mobile platforms to competing app stores, marking a significant regulatory shift in the Asia-Pacific tech sector. Under new laws, users in Japan can now download apps from sources outside the official Apple App Store and Google Play. This change disrupts long-standing control by the two tech giants […]
SAP rolled out a new set of patches addressing critical vulnerabilities that expose enterprise systems to remote code execution and injection attacks. The November Security Patch Day update includes 18 new security notes and two revisions, reinforcing SAP’s efforts to secure its product line. Among the most severe flaws is CVE-2025-42890, a critical vulnerability in […]