Chief financial officers and senior finance executives across global investment, banking, energy, and insurance sectors are being targeted in a sophisticated spear-phishing campaign deploying the NetBird malware, according to a report from GBHackers News. The operation appears designed to infiltrate high-value corporate environments by compromising executive-level email accounts through deceptive, tailored phishing messages. Once delivered […]
Microsoft has introduced a new privacy feature in its Edge browser for Android that allows users to lock InPrivate browsing tabs using a PIN or biometric authentication. The update, currently available in the Canary version, enhances session security by requiring user authentication when returning to private tabs after leaving the app. The feature mirrors similar […]
Cybersecurity researchers have uncovered what may be the largest known leak of Chinese personal data from a single source, exposing more than 4 billion records online. The 631-gigabyte trove was found on an unsecured server and included sensitive details such as WeChat and Alipay activity, residential addresses, financial data, and national identification information. The leak, […]
A publicly available proof-of-concept (PoC) exploit for a critical zero-day vulnerability in multiple Fortinet products has heightened concerns over enterprise network security. The flaw, identified as CVE-2025-32756 with a CVSS score of 9.8, enables unauthenticated remote code execution via a stack-based buffer overflow in the `/remote/hostcheck_validate` endpoint. It originates from improper bounds checking of the […]
The U.S. Department of Justice has seized approximately $7.7 million in cryptocurrency tied to an alleged scheme involving North Korean information technology workers, authorities said. The funds were frozen and confiscated after North Korean nationals reportedly attempted to launder the assets, which were linked to a long-running conspiracy. Officials stated the funds were illicitly obtained […]
Honeywell’s Advanced Monitoring and Incident Response (AMIR) service identified more than 1,000 cybersecurity incidents after analyzing 90 billion logs, reflecting a growing wave of threats targeting operational technology (OT) systems. The findings highlight the increasing complexity and frequency of cyber risks confronting industrial environments. The AMIR service, which specializes in monitoring and investigating cybersecurity events […]
Meta expressed confusion Monday after a directive from the House of Representatives ordered staffers to remove WhatsApp from official devices starting next week. The policy, delivered in a notice from the House’s chief administrative officer, bans the messaging app without offering a clear explanation, prompting Meta to challenge the decision. Meta challenges House ban by […]
Glasgow City Council reported a cyber incident that disrupted multiple online services and may have compromised customer data. The council confirmed the issue on its official channels, stating that the breach had affected operations and potentially led to unauthorized access to personal information. The Glasgow City Council data breach has raised concerns about the security […]
Cyberattacks don’t pause for diplomacy, and digital warfare rarely recognizes traditional boundaries, an ex-NATO hacker warned during a recent interview focused on global cybersecurity threats. The former military cyber specialist emphasized that in the digital domain, there’s no such thing as a ceasefire—a reality that government agencies and private companies must urgently accept. He particularly […]
Atos has rolled out its SecureHorizons NIS2 Compliance Manager on the ServiceNow platform, aiming to streamline and automate cybersecurity compliance for organizations across the European Union. The new solution is designed to help businesses meet the requirements of the EU’s Network and Information Security Directive (NIS2), which mandates stricter cybersecurity and risk management practices. By […]
A proof-of-concept exploit has been made publicly available for a critical vulnerability in Apache Parquet, identified as CVE-2025-30065, potentially exposing servers to remote attacks. The flaw carries the highest severity rating, enabling threat actors to easily locate and target unpatched systems. Apache Parquet is a widely used open-source data storage format, and the release of […]
A data breach at Ascension Health in April 2025 affected 437,329 individuals, according to a report filed with the U.S. Department of Health and Human Services. The incident underscores the persistent vulnerabilities tied to third-party software flaws and inadequate identity management practices that continue to challenge healthcare organizations. While specific technical details of the breach […]