A cyberattack disrupted operations at a hydroelectric facility in Norway, forcing a dam valve to remain open for several hours. The incident, now under investigation, resulted in unauthorized access that compromised critical infrastructure. Officials confirmed the Norwegian dam breach triggered naturally by the attack, raising concerns about the security of the nation’s energy systems. The […]
Two critical vulnerabilities in ScriptCase’s Production Environment module allow attackers to execute remote commands and gain full control of affected web servers. Security researchers from SYNACTIV identified that the ScriptCase flaws let hackers bypass authentication and inject system-level commands without requiring login credentials. Tracked as CVE-2025-47227 and CVE-2025-47228, the bugs affect version 1.0.003-build-2 of the […]
A suspended UK IT worker has been sentenced to seven months in prison after launching a retaliatory cyberattack on his employer’s systems. The man, who had recently been removed from his position, used his access to alter login credentials and disrupt internal operations. The court found that the suspended UK IT worker deliberately compromised the […]
A highly sophisticated hacking group known as NightEagle (APT-Q-95) has launched targeted cyberattacks on China’s critical technology sectors, leveraging undisclosed Exchange vulnerabilities and memory-based malware. Since 2023, the group has focused on artificial intelligence, semiconductors, quantum computing, and military industries. These NightEagle Hacks China Technaturally, exploiting zero-days, have enabled sustained email data exfiltration from high-value […]
A trio of critical Bluetooth flaws let hackers take control of millions of popular headphones and earbuds without pairing or authentication. Security researchers at ERNW identified the vulnerabilities in Airoha Bluetooth chips used in devices from Sony, Bose, Marshall, and others. Hackers only need to be within 10 meters to exploit the flaws. The vulnerabilities—CVE-2025-20700, […]
Pakistan-linked threat actor APT36, also known as Transparent Tribe, has expanded its cyber-espionage operations by targeting India’s BOSS Linux systems. In a marked evolution of tactics, the group now deploys phishing campaigns leveraging weaponized ZIP files instead of relying solely on Windows-based attacks. The campaign, dubbed “APT36 Hacks BOSS Linux,” aims to infiltrate government systems […]
Canada has ordered Chinese surveillance giant Hikvision to cease operations within its borders, citing national security concerns. The directive marks a significant move as Canada orders Hikvision exit amid increasing scrutiny of foreign technology firms with potential government ties. The order forms part of a broader stance against high-risk vendors in the country’s critical infrastructure. […]
A new report from the Northern Ireland Audit Office criticizes the performance of major Northern Ireland IT projects, citing persistent issues in planning, delays in implementation, and a reliance on outdated contract extensions. The findings point to a troubling pattern of mismanagement across several large-scale digital initiatives. Auditors found that weak project oversight and poor […]
Cloudflare has introduced end-to-end encryption to its video conferencing platform, Orange Meets, and released the underlying technology to the public. By making the codebase available, Cloudflare open sources encrypted video tools to promote transparency and security in digital communications. The addition of end-to-end encryption ensures that only participants in a call can access its content, […]
OpenAI plans GPT-5 as a unified model that combines the most significant advances from its different AI systems, the company confirmed this week. The move marks a strategic shift toward integrating specialized capabilities into a single, more powerful framework. According to OpenAI, the new model is expected to launch in the summer, although an exact […]
Nucor Corp., one of the largest steel producers in the United States, confirmed that a recent cyberattack resulted in the theft of data from its IT systems. In a new update, the company said the breach affected some of its digital infrastructure, and Nucor says hackers stole data during the incident. The company has not […]
Federal officials are urging U.S. companies to bolster their cybersecurity defenses following escalating tensions in the Middle East. Iran strikes prompt U.S. agencies to warn that retaliatory cyber operations could soon target critical infrastructure, including energy, transportation and communication systems. The Department of Homeland Security has advised businesses to assess vulnerabilities and prepare incident response […]