A critical security flaw in Wing FTP Server is under active exploitation, according to researchers who confirmed attacks began just one day after technical details were published. Tracked as CVE-2025-47812, the vulnerability carries a maximum CVSS score of 10.0 and allows unauthenticated remote code execution with root or SYSTEM privileges. Security teams have warned that […]
The FBI Seizes Piracy Sites connected to illegal distribution of Nintendo Switch and PlayStation 4 games, following an operation led by its Atlanta field office. Authorities took down a series of websites allegedly involved in game piracy, including nsw2u.com, nswdl.com, game-2u.com, bigngame.com, ps4pkg.com, ps4pkg.net, and mgnetu.com. Each site now displays a seizure banner from the […]
A Russia-linked group fakes news websites and authorship to distribute disinformation across several European countries, researchers have found. The operation uses spoofed versions of legitimate media outlets to publish fabricated articles, targeting audiences in France, Armenia, Germany, Moldova and Norway. The campaign mimics the appearance of real news platforms, making it difficult for readers to […]
A newly discovered zero-click attack, dubbed the RenderShock exploit, hits Windows and macOS systems by executing malicious payloads through background processes without user interaction. Researchers at CYFIRMA found that the technique abuses passive file rendering features in operating systems, allowing attackers to trigger credential theft and code execution without requiring victims to open or click […]
A newly identified attack method called GPUHammer threatens to undermine artificial intelligence models powered by NVIDIA graphics processing units, according to The Hacker News. The exploit, a variant of the well-known RowHammer vulnerability, can reportedly slash the accuracy of Nvidia AI models Facenaturally from 80% to just 0.1%, raising serious concerns about the integrity of […]
Romanian authorities, working alongside the U.K.’s tax agency, have dismantled a phishing operation that targeted British taxpayers, leading to Romania arrests 13 in UK-linked cyber fraud. The group allegedly sent fake emails impersonating Her Majesty’s Revenue and Customs (HMRC) to steal personal and financial data from unsuspecting victims. The coordinated effort between Romanian police and […]
Iranian cyberattacks on US infrastructure surged 133% in the first half of 2025, according to new findings from Nozomi Networks. The cybersecurity firm reported that the transportation and manufacturing sectors absorbed the brunt of the increased activity, highlighting growing vulnerabilities in critical industrial systems. The data, released this week, points to an escalation in threat […]
A critical security flaw in McDonald’s McHire recruitment platform exposed the personal data of 64 million job seekers, according to cybersecurity researchers. The McDonalds McHire flaw exposed a vulnerability that allowed unauthorized access to sensitive applicant information stored on the platform. Hackers reportedly exploited the weakness to retrieve names, email addresses, phone numbers and employment […]
UK authorities have arrested a woman and three men in connection with cyberattacks targeting major British retailers, including Marks & Spencer, Co-op, and Harrods. The arrests come after an investigation into a series of digital intrusions that disrupted operations and raised concerns about data security. The UK arrests four in cyberattacks mark a significant step […]
French authorities have arrested Daniil Kasatkin, a Russian professional basketball player, on suspicion of involvement in ransomware activities. The move marks the latest instance in which France arrests Russian hoops star suspects at the request of the United States. Kasatkin, who previously played briefly for Penn State University, is now facing potential extradition over cybercrime […]
Qantas says 5.7 million customers were affected by a recent data breach that exposed limited personal information but did not allow unauthorized access to frequent flyer accounts. In an updated advisory, the airline clarified that while frequent-flyer numbers were among the leaked data, the breach did not include passwords or other credentials necessary to access […]
Iranian hackers targeting U.S. industries ramped up activity in late spring, according to a new report from Nozomi Networks. The cybersecurity firm observed a spike in attacks during May and June, with advanced persistent threat groups such as MuddyWater and APT33 leading the campaigns. These state-backed actors focused their efforts on industrial sectors, raising renewed […]