Hackers lure Python devs into phishing traps by deploying a counterfeit version of the Python Package Index (PyPI) website, according to a warning issued this week by the Python Software Foundation. The attackers aim to steal user credentials by mimicking the official PyPI platform, a repository widely used by developers to share and install packages. […]
A newly discovered XWorm V6 malware variant has surfaced in active attacks against Windows users, showcasing advanced anti-analysis features and memory-only execution. Security researchers at Netskope uncovered the strain following a year-long investigation into XWorm’s development. The XWorm V6 malware evades detection through obfuscated VBScript droppers and runtime payload reconstruction via reversed character arrays. The […]
The SafePay ransomware group has claimed responsibility for a cyberattack that compromised systems at global IT distributor Ingram Micro, threatening to leak 3.5 terabytes of stolen data. According to the threat actors, the breach occurred earlier this month, and the stolen files allegedly include internal documents, client records, and business communications. Ingram Micro hit SafePay’s […]
Hackers exploit WordPress Alone theme vulnerabilities to launch remote code execution attacks, putting thousands of websites at risk of full compromise. The flaw, an unauthenticated arbitrary file upload vulnerability, allows attackers to bypass security measures and gain control over affected sites. Once inside, threat actors can execute malicious scripts, manipulate content, and take over administrative […]
SonicWall warns users to patch immediately after uncovering three critical vulnerabilities in its VPN products. The security flaws, which affect several of the company’s firewall and remote access solutions, could allow attackers to bypass authentication or execute remote code. These risks pose a serious threat to organizations relying on SonicWall to secure remote connections. The […]
Russia has blocked access to Speedtest, a widely used internet performance tool developed by Seattle-based company Ookla, citing national security risks. The move, announced by Russia’s telecommunications regulator, comes as officials raise concerns that data collected through the tool could be leveraged in cyberattacks. Russia bans Speedtest tool as part of broader efforts to limit […]
Cybersecurity researchers have released a free public decryptor for the FunkSec ransomware strain, marking a significant win for victims who lost access to their data. The tool became available after the group behind the FunkSec ransomware was deemed inactive. Experts confirmed that the FunkSec ransomware cracked open following signs that its operators had ceased all […]
The average cost of a data breach in the U.S. surged to a record $10 million this year, IBM says US data breach costs continue to outpace global trends. While the global average dropped to $4.45 million—a 9% decline from 2024—U.S. organizations experienced the steepest financial impact among surveyed countries. IBM says US data breach […]
Lenovo has released new UEFI firmware updates to address high-severity BIOS vulnerabilities that could allow attackers to bypass Secure Boot protections. The flaws affect specific all-in-one desktop models that use customized Insyde UEFI firmware. As part of this security response, Lenovo fixes BIOS flaws that posed a risk to device integrity and system trust. The […]
A North Korean hacking unit known as TraderTraitor has intensified its focus on cryptocurrency firms by breaching cloud platforms and poisoning supply chains, according to new findings. The TraderTraitor hacks cloud environments by leveraging trojanized applications and social engineering, often targeting developers with fake job offers on LinkedIn or Telegram. Since 2020, the group has […]
Orange, the French multinational telecommunications and digital services provider, faced a cybersecurity breach on Friday that targeted one of its information systems, according to a report by BleepingComputer. The incident left operations disrupted, raising concerns about the resilience of its digital infrastructure. Orange hit by cyberattack, has yet to disclose full details about the breach […]
Microsoft has identified a vulnerability in macOS, dubbed “Sploitlight,” that could allow attackers to bypass Transparency, Consent, and Control (TCC) protections. Microsoft uncovers macOS flaw in the system’s logging framework, which could expose sensitive user data by exploiting how the operating system grants app permissions. According to Microsoft, the flaw resided in how macOS logged […]