A cyberattack on Collins Aerospace disrupted airport operations across Europe, forcing Heathrow, Brussels, and Berlin airports to shift to manual check-in procedures. The Collins cyberattack snarls flights across these major hubs, triggering long delays, flight cancellations, and widespread passenger frustration starting Friday night. Collins Aerospace, a subsidiary of RTX, supplies the Muse software used for […]
Threat actors linked to North Korea have deployed deceptive job scams to deliver malware into cryptocurrency and retail companies, according to new findings. The campaign used ClickFix-style lures to target marketing and trader roles, avoiding the typical focus on software developers. DPRK hackers target crypto naturally through these socially engineered schemes, exploiting job-seeking platforms to […]
Microsoft has addressed a critical security flaw in Entra ID that could have allowed attackers to impersonate users across any tenant, including those with Global Administrator privileges. The vulnerability, tracked as CVE-2025-55241, received a maximum CVSS severity score of 10.0. Microsoft fixes Entra ID to prevent abuse of this token validation failure, which posed a […]
Hundreds of flights across Europe and the United States faced delays and cancellations after a cyberattack and cable cuts grounded key airline systems. Disruptions began when Collins, a major airline ticketing service provider, suffered a suspected cyber breach, crippling its ability to process passenger bookings. Simultaneously, severed cables in Dallas disrupted airport operations, compounding the […]
A China-linked cyberespionage group known as APT41 impersonated a U.S. lawmaker in phishing attacks targeting government agencies, think tanks, and academics focused on U.S.-China trade and policy. The campaign, observed by Proofpoint in July and August 2025, used economic-themed lures to collect intelligence during sensitive trade negotiations between the two nations. APT41, also tracked as […]
A coordinated Russian disinformation campaign has resurfaced online with more than 200 newly created websites, reigniting concerns over foreign interference. The development signals that Russia revives fake news operations ahead of upcoming electoral cycles, even as U.S. federal efforts to counter election misinformation face severe cutbacks under the Trump administration. The network of sites promotes […]
Google has issued an emergency security update for Chrome, addressing four high-severity vulnerabilities in the browser’s latest stable release. The update, pushed to version 140.0.7339.185/.186 for Windows and Mac and 140.0.7339.185 for Linux, includes a critical fix for CVE-2025-10585, a zero-day flaw in the V8 JavaScript engine that is actively being exploited. Google patches Chrome […]
Jenkins, the widely used open-source automation server, has issued a new security advisory addressing several high-severity vulnerabilities. The update, released on September 18, includes fixes for flaws that could enable denial-of-service attacks and unauthorized access. This round of Jenkins fixes flaws that could allow attackers to disrupt operations or compromise build environments. According to the […]
SonicWall confirmed a security breach on September 16, 2025, that compromised its MySonicWall cloud platform. The incident allowed threat actors to access firewall configuration backups stored in the cloud. This SonicWall breach exposes firewall backup data tied to enterprise-level customers, potentially affecting network security settings and policies. The company acknowledged that the intrusion stemmed from […]
Austria’s privacy watchdog has announced a significant reduction in its operations due to severe budget cuts, raising concerns about the country’s ability to enforce data protection laws. The watchdog stated it will no longer process most complaints, conduct investigations or carry out audits, citing a lack of resources following a 2024 budget freeze. The non-profit […]
Security Operations Centers are under mounting pressure to detect and disrupt cyber threats before they escalate into full-blown crises. Real-time threat intelligence plays a pivotal role in enabling SOCs to respond swiftly to attackers who exploit automation, zero-days, and ransomware to breach defenses. Recent incidents across industries highlight the urgent need for actionable intelligence. A […]
Check Point Buys Lakera as part of a strategic move to strengthen its enterprise AI protection capabilities, the company announced Monday. The acquisition brings a specialized artificial intelligence security platform into Check Point Software Technologies’ portfolio, signaling a deeper commitment to securing AI applications in enterprise environments. The purchase comes as cybersecurity firms race to […]