Global banks are facing a surge in highly sophisticated distributed denial-of-service campaigns, a recent report warns. These DDoS attacks cripple global financial systems by overwhelming digital infrastructures and disrupting services. According to the report, the scale and complexity of these attacks are growing, making mitigation increasingly difficult for even the most secure institutions. The campaigns […]
Cybercriminals have exploited Inferno Drainer, a malicious toolkit, to siphon $43,000 from unsuspecting CoinMarketCap users. The attack, which targeted cryptocurrency enthusiasts through phishing links, highlights growing threats in the digital asset space. Scammers drain $43K from CoinMarketCap users by luring victims into connecting their wallets to fraudulent platforms, giving attackers full access to their funds. […]
Nucor, the largest steel producer and recycler in North America, confirmed that hackers breached its systems and stole data in a recent cyberattack. The company disclosed the incident after conducting an internal investigation that revealed unauthorized access to its network. Nucor says hackers stole sensitive information, though it has not yet specified the nature or […]
New York Governor Signs a new cybersecurity bill into law, marking a significant step in strengthening digital defenses across the state. The legislation endorses a “whole of government approach,” targeting the growing wave of cyber threats that continue to challenge state and local agencies across the country. Lawmakers designed the measure to align security strategy […]
Ivanti is facing growing scrutiny after disclosing another set of zero-day vulnerabilities affecting its products, raising fresh concerns about the security vendor’s ability to shield users from targeted cyberattacks. The company attributed the latest exploits to unresolved security flaws in unnamed open-source libraries, distancing its proprietary code from the breaches. However, some cybersecurity researchers are […]
Hewlett Packard Enterprise (HPE) has patched multiple critical vulnerabilities in its StoreOnce data protection platform that could allow remote code execution, authentication bypass, and unauthorized access to enterprise storage systems. The flaws impact StoreOnce VSA versions prior to 4.3.11 and pose significant risk to backup infrastructure. The most severe issue, CVE-2025-37093, carries a CVSS score […]
Hackers are actively exploiting a critical vulnerability in Roundcube, an open-source webmail application, exposing users to remote code execution attacks. The flaw, tracked as CVE-2025-49113, allows attackers to run malicious code on targeted servers without authentication. As technical details about the vulnerability have surfaced online, threat actors are now selling exploits on underground forums, increasing […]
Nearly 3,000 customer accounts on The North Face’s website were compromised in a recent cyberattack, the apparel brand’s parent company disclosed in data breach notification letters. The incident involved credential stuffing, a method where attackers use previously obtained usernames and passwords from unrelated breaches to gain unauthorized access to user accounts. The breach adds to […]
Microsoft is warning users of a critical vulnerability in Outlook that could allow attackers to execute arbitrary code remotely, despite requiring local access to initiate. Tracked as CVE-2025-47176, the flaw was disclosed on June 10 with a CVSS score of 7.8, rated “Important.” The vulnerability stems from a path traversal issue involving ‘…/…//’ sequences, allowing […]
A cyberattack claimed by a pro-Israel hacktivist group has disrupted services at Iran’s Bank Sepah, according to reports from Iran-focused media outlets. The incident forced multiple bank branches to close and left customers unable to access their accounts. Payment processing systems also went offline, deepening the impact on both retail and commercial operations. Local media […]
North Korean hackers have leveraged Zoom meetings as a vector to hijack users’ systems, using deceptive tactics that exploit human trust. Through social engineering, attackers lure participants into executing malicious commands during what appear to be legitimate video calls. These techniques allow North Korean hackers to seize PCs by tricking users into unknowingly granting system-level […]
A newly discovered vulnerability in Realtek’s RTL8762E SDK v1.4.0 exposes devices to denial-of-service attacks via the Bluetooth Low Energy Secure Connections pairing protocol. The Realtek Bluetooth Flaw Lets attackers exploit improper protocol state validation during the pairing process, enabling disruption without requiring authentication or elevated privileges. Researchers identified the flaw in the RTL8762EKF-EVB development board, […]