Meta Platforms Inc. has dismantled three covert influence operations tied to China, Iran and Romania that were using fake accounts to manipulate political discourse across multiple regions, according to *The Record*. The campaigns operated on Meta-owned platforms, including Facebook and Instagram, and were designed to spread propaganda and shape public opinion through coordinated inauthentic behavior. […]
GitLab has issued emergency patches to fix ten security vulnerabilities affecting its Community Edition (CE) and Enterprise Edition (EE) platforms, some of which could allow complete account takeover. The flaws span versions 17.9 through 18.0 and include high-severity vulnerabilities with CVSS scores exceeding 8.0. The most critical, CVE-2025-4278, is an HTML injection flaw that impacts […]
A massive cybersecurity breach has exposed sensitive information tied to the Paraguay data of 7.4 million individuals, according to researchers who traced the leak to malware infections. The stolen data, now circulating on dark web forums, reportedly includes details about nearly the entire population of the South American country. Experts believe the breach began when […]
SonicWall warns NetExtender tool users to be on alert after discovering a tampered version of the application embedding data-theft capabilities. The company identified that attackers modified the legitimate NetExtender VPN client, inserting malicious code designed to capture user information. This development raises concerns for enterprises relying on the tool for secure remote access. According to […]
The U.S. Department of Justice on Monday announced the arrest of a key figure linked to North Korea’s illicit IT worker scheme. In a coordinated operation, authorities seized nearly $7.7 million tied to the network’s activities. The Justice Department also confiscated 29 financial accounts, dismantled 21 fraudulent websites, and took control of nearly 200 computers […]
Cybersecurity analysts have uncovered two sophisticated investment scam operations that leverage Facebook advertisements, deceptive domains, and IP-based filtering to target victims. Identified by DNS threat intelligence firm Infoblox as “Reckless Rabbit” and “Ruthless Rabbit,” the campaigns employ spoofed celebrity endorsements to lure users into fraudulent schemes. The scams are structured around traffic distribution systems (TDSes), […]
A malicious Python package uploaded to the Python Package Index (PyPI) has been discovered delivering remote access trojan (RAT) malware, with its activity traced back to 2022. The package specifically targets developers involved with Discord, a popular communication platform used by both gamers and developers. Despite being available on PyPI for more than three years, […]
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has altered how it disseminates updates on security vulnerabilities, shifting its notifications to the social media platform X and email alerts. The move marks a significant change in the way the federal agency communicates with cybersecurity professionals and the public, as it steps away from more traditional […]
ASUSTeK Computer Inc. has issued patches addressing two security vulnerabilities in its DriverHub utility, according to a report from The Hacker News. The flaws, if left unremedied, could have enabled attackers to execute arbitrary code remotely on affected systems. The company released the updates to mitigate the risks associated with the bugs, which posed a […]
Proofpoint has reached an agreement to acquire Germany-based Hornetsecurity Group in a deal valued at over $1 billion, the companies announced. The acquisition will expand Proofpoint’s capabilities in cloud-based email and collaboration security, particularly for Microsoft 365 environments. Hornetsecurity provides a suite of security tools tailored for Microsoft’s productivity platform, including email filtering, backup, and […]
SK Telecom, South Korea’s largest wireless carrier, has disclosed a major cybersecurity breach involving a stealthy malware attack that persisted undetected for two years. The breach resulted in the unauthorized leakage of approximately 26 million International Mobile Subscriber Identity (IMSI) records—unique identifiers tied to mobile users and critical for network authentication and tracking. The attack, […]
Hackers are ramping up efforts to compromise macOS users by deploying malware through counterfeit versions of Ledger Live, the software used to manage Ledger hardware cryptocurrency wallets, according to research by Moonlock. Since August 2024, at least four distinct campaigns have been identified, with attackers refining tactics to bypass Apple’s security measures and steal users’ […]