A widespread Cloudflare block in Spain triggered a surge in VPN usage last week, as major internet service providers restricted access to thousands of websites. The move, aimed at curbing illegal La Liga football streams, caused a 200% spike in Proton VPN signups on October 19, according to the company. Monitoring site Hayahora.futbol confirmed that […]
More than 180 million stolen credentials have been added to the database of Have I Been Pwned, expanding one of the largest public repositories of compromised account information. The newly added data highlights the growing scale of credential theft, which continues to fuel cybercrime across the digital economy. These stolen login details, often obtained through […]
Security researchers have uncovered cache poisoning vulnerabilities in two DNS-resolving applications, raising concerns about the return of a once-notorious attack method. The flaws, detailed under CVE-2025-40780, CVE-2025-40778, and CVE-2025-11411, affect BIND, the most widely used DNS software. These BIND flaws revive DNS threats similar to those addressed in 2008, when a major vulnerability led to […]
A spear-phishing campaign known as PhantomCaptcha hit Ukraine aid groups on October 8, 2025, deploying a WebSocket-based remote access trojan. SentinelOne researchers identified that attackers impersonated the Ukrainian President’s Office to send malicious PDF files to organizations like the Red Cross, UNICEF and local administrations. Victims were redirected to a fake Zoom site hosting malware. […]
A state-backed Iranian cyber-espionage group known as MuddyWater has launched a wave of attacks targeting more than 100 government organizations worldwide. In these operations, Iranian hackers hit 100-plus entities using the latest version of their custom surveillance tool, known as the Phoenix backdoor. The campaign highlights the group’s continued focus on intelligence gathering through stealthy […]
Hackers exploit OAuth applications to maintain persistent access to cloud environments, even after victims reset passwords or enable multifactor authentication. Researchers at Proofpoint identified a growing trend where cybercriminals and state-backed actors use trusted Microsoft Entra ID mechanisms to bypass conventional account protections. Once inside, attackers register internal applications with custom permissions, enabling access to […]
Researchers at Trend Micro have uncovered a significant evolution of the Vidar malware family. Dubbed Vidar Stealer v2.0, the upgraded variant pierces Chrome’s AppBound encryption by using a sophisticated multithreaded memory injection technique. This new capability allows the malware to steal sensitive data more efficiently while evading standard detection methods. According to the analysis, Vidar […]
A critical remote code execution vulnerability in NeuVector, tracked as CVE-2025-54469 with a maximum CVSS score of 10.0, has been disclosed by the SUSE Rancher Security team. The NeuVector flaw exposes containers to potential command injection through unsanitized environment variables, posing a significant risk to organizations relying on the platform for container security. The vulnerability […]
A critical vulnerability in Microsoft Windows Server Update Services (WSUS), tracked as CVE-2025-59287, has been disclosed with a maximum CVSS score of 9.8. The Microsoft WSUS flaw enables unauthenticated attackers to execute remote code through unsafe cookie deserialization, posing a severe threat to enterprise environments relying on WSUS for patch management. Security researcher Batuhan Er […]
Symantec researchers have uncovered significant overlaps among Chinese state-linked cyberespionage groups, revealing shared tools and infrastructure across multiple operations. The report, titled “Symantec Ties China Spynaturally,” highlights how threat actors deployed Zingdoor backdoors, ShadowPad malware, and the KrustyLoader trojan in coordinated attacks targeting global networks. The analysis shows these malware variants operating within a broader […]
Atlassian has issued security updates to fix a high-severity vulnerability in Jira Software and Jira Service Management running in Data Center and Server deployments. The Jira flaw lets hackers exploit a path traversal weakness, tracked as CVE-2025-22167, to write arbitrary files on affected systems. This exposure poses a significant risk to organizations relying on these […]
The Internet Systems Consortium has rolled out security updates for BIND 9, addressing three high-severity vulnerabilities that could allow attackers to launch cache poisoning and denial-of-service attacks. The ISC Patches BIND Flaws to prevent exploitation of these issues, which pose significant risks to DNS infrastructure if left unpatched. Among the disclosed vulnerabilities are CVE-2025-40777 and […]