Russia showcased its growing military capabilities this week as it conducted a high-profile weapons drill near NATO territory. As part of the exercise, Russia tested a hypersonic missile and released video footage of the launch, intensifying concerns in the West. The demonstration comes amid heightened regional tension following recent airspace violations involving Russian drones over […]
FinWise Bank has alerted customers that a former employee accessed sensitive data after their departure, triggering a security incident now known as the FinWise Insider Breach. The breach affected American First Finance, one of FinWise’s corporate clients, and compromised personal information belonging to approximately 689,000 individuals. According to notifications sent by the bank, the former […]
China-linked cyber-espionage group Mustang Panda has expanded its toolkit with a new USB worm dubbed SnakeDisk, targeting systems in Thailand. Security analysts at IBM X-Force reported that the malware only activates on devices using Thailand-based IP addresses, signaling a focused campaign. The operation, which demonstrates the latest instance of Mustang Panda hacks Thailand strategically, aims […]
Hackers breached systems at French luxury group Kering, stealing sensitive data from customers of Gucci, Balenciaga and Alexander McQueen. The Kering breach exposes millions of clients, with attackers exfiltrating names, phone numbers, email addresses, home addresses and purchase histories. Kering confirmed the incident and alerted data protection authorities, though it declined to specify the number […]
Security researchers have identified HybridPetya, a newly emerged ransomware strain that builds on the destructive legacy of Petya and NotPetya. HybridPetya revives Petya tactics by combining advanced boot-level attacks with firmware exploitation, targeting systems at their most vulnerable layers. First detected in September 2025, the malware has quickly drawn attention for its ability to compromise […]
A coordinated supply chain attack has compromised over 40 NPM packages, including the widely used @ctrl/tinycolor, which sees more than 2 million downloads weekly. This NPM Malware Breach Hits a critical point in the ecosystem, as attackers deployed a self-propagating worm to steal developer credentials and infect additional packages. The incident surfaced after suspicious GitHub […]
Cybersecurity firm Zscaler confirmed a data breach after attackers exploited compromised OAuth tokens linked to Salesloft Drift, a Salesforce-integrated marketing platform. The attack, part of a global supply-chain campaign believed to affect more than 700 organizations, resulted in Zscaler hit in SaaS through unauthorized access to its Salesforce environment. The company stated that its core […]
Qualcomm has disclosed two critical vulnerabilities in its latest September 2025 Security Bulletin, highlighting severe issues in modem components used across mobile and automotive platforms. Identified as CVE-2025-21483 and CVE-2025-27034, both flaws carry a CVSS score of 9.8, indicating maximum severity. These Qualcomm modem flaws present significant security risks, potentially exposing affected devices to remote […]
The Wireshark Foundation has released version 4.4.9 of its widely used network traffic analyzer, delivering a maintenance update that enhances stability and resolves several key issues. Wireshark 4.4.9 fixes critical bugs, including a vulnerability in the SSH dissector (wnpa-sec-2025-03) that previously caused unexpected crashes during secure shell traffic analysis. The release improves protocol support for […]
A hacker collective has reportedly demanded that Google terminate two employees or face the release of confidential company data. In a message posted on Telegram, a group calling itself “Scattered LapSus Hunters” threatened to leak the tech giant’s databases unless the company fires Austin Larsen and Charles Carmakal, both with Google’s Threat Intelligence Group. Hackers […]
Amazon has taken active measures to disrupt a cyber-espionage operation linked to Midnight Blizzard, a Russian state-backed hacking group also tracked as APT29. The campaign targeted Microsoft 365 accounts in an attempt to steal sensitive information, according to cybersecurity researchers. As part of the intervention, Amazon disrupts Russian hackers by neutralizing infrastructure used to impersonate […]
SIM swapping attacks are surging globally, with the U.K. reporting a 1,055% increase in 2024. Criminals exploit mobile carriers to hijack phone numbers, using stolen data to bypass identity checks. These attacks enable access to bank accounts, crypto wallets, and email services. In response, eSIM emerges as key defense, offering built-in hardware security that limits […]