U.K. intelligence agencies have identified a direct link between Russian cyberattacks and physical acts of sabotage occurring within the country, a senior cyber official said. The hacking threat posed by Russia is no longer confined to digital domains but is now manifesting “on the streets of the UK,” the official stated. The warning underscores growing […]
Pearson, one of the world’s largest education companies, has suffered a cyberattack that resulted in the theft of corporate data and customer information, according to information obtained by BleepingComputer. The breach exposed sensitive data, though the full scope of the incident and the number of affected individuals or organizations remains undisclosed. The attack highlights the […]
OpenAI’s ChatGPT is rolling out a new feature for its Deep Research tool, allowing users to download research outputs as PDF files. The capability addresses a longstanding user demand for easier sharing and archiving of complex, multi-step research conducted within the platform. Deep Research is designed to assist users with in-depth analysis across layered queries, […]
Andy Frain Services, an Illinois-based provider of physical security services, suffered a data breach in October that exposed personal information of more than 100,000 individuals, according to a report by *SecurityWeek*. The cyberattack was allegedly carried out by the Black Basta ransomware group, which claimed responsibility for compromising approximately 750 gigabytes of the company’s files. […]
A recent update to the Tycoon 2FA phishing kit reveals the deployment of new evasion techniques, including browser fingerprinting and enhanced payload encryption, signaling a continued evolution in cybercriminal tactics. The kit, designed to bypass two-factor authentication (2FA), now incorporates methods that make detection and mitigation increasingly difficult for security systems. Browser fingerprinting allows attackers […]
A widening cyberattack targeting Europe’s largest software maker has revealed hundreds of global victims, drawing comparisons to previous state-sponsored campaigns such as Salt Typhoon and Volt Typhoon. The assault, which exploited a zero-day vulnerability, has impacted organizations across multiple sectors, though specific industries and affected regions have not been disclosed. Security experts note the scale […]
Adidas has confirmed that a data breach involving a third-party customer service provider has exposed certain information belonging to its consumers in South Korea, according to a report by BusinessKorea. The sportswear giant did not disclose the specific nature or volume of the compromised data but acknowledged that the breach stemmed from an external vendor […]
A newly identified Windows-based botnet malware dubbed HTTPBot has launched a wave of cyberattacks targeting organizations in China’s gaming, technology, and education sectors, according to a report from The Hacker News. The intrusions, which have been steadily increasing over the past several months, have totaled at least 200 confirmed incidents since April. The HTTPBot malware, […]
The SANS Institute has introduced ICS613, a new hands-on operational technology (OT) penetration testing course designed to bolster cybersecurity for critical infrastructure environments. The course provides practical training using real industrial control system (ICS) hardware and systems, equipping cybersecurity professionals with the skills needed to identify and mitigate vulnerabilities in OT networks. ICS613 focuses on […]
A data breach at IT services provider Serviceaide has compromised the personal information of approximately 483,000 patients affiliated with Catholic Health, highlighting the growing risks associated with third-party vendors in the healthcare industry. According to security experts, the incident demonstrates how healthcare organizations remain vulnerable when external service providers experience system failures or security lapses. […]
Security researchers have published a proof-of-concept (PoC) exploit for a critical vulnerability in Fortinet products, identified as CVE-2025-32756. The release underscores the urgency for organizations to patch affected systems immediately, as the public availability of the exploit code significantly raises the risk of widespread attacks. The flaw affects Fortinet’s widely used network security solutions, though […]
MathWorks, the company behind the widely used MATLAB software, has confirmed that a ransomware attack is responsible for an ongoing service disruption affecting its operations. The incident has led to sustained outages, though the company has yet to disclose the full extent of the impact or a timeline for restoration. The attack has disrupted access […]