Schneider Electric has confirmed six critical security weaknesses in its EcoStruxure IT Data Center Expert software, exposing data centers to potential remote code execution. The Schneider Electric flaws expose systems running versions 8.3 and earlier to attacks that could allow unauthorized access and OS-level command injection. The most serious issue, tracked as CVE-2025-50121, received a […]
SafePay ransomware has rapidly emerged as a major cyber threat, targeting managed service providers and small-to-midsize enterprises across industries. SafePay ransomware hits 200 victims globally in Q1 2025 alone, marking a sharp rise in its activity since its 2024 debut. The group infiltrates networks using compromised Remote Desktop Protocol and Virtual Private Network credentials. Unlike […]
A misconfigured cloud storage bucket at Dallas-based tax consultancy Rockerbox exposed 245,949 sensitive user records, including Social Security numbers and driver’s licenses. The Rockerbox breach exposes SSNs through an unencrypted 286.9 GB repository that was openly accessible via a simple HTTP GET request and indexed online by early July 2025. The exposed data included tax […]
A German court has ruled that Meta violated European privacy laws by embedding tracking technologies in third-party websites, in a case that could set a precedent for future legal actions. In the decision issued in Leipzig, the court ordered Meta to pay €5,000 ($5,900) to a Facebook user who brought the lawsuit, marking a key […]
Bitcoin Depot, a major operator of cryptocurrency ATMs across North America, confirmed that a cyberattack last year exposed personal data belonging to over 26,000 individuals. The Bitcoin Depot breach exposes data including names, addresses and driver’s license numbers. The company disclosed the incident after determining hackers gained unauthorized access to internal systems. The breach affected […]
Decentralized exchange GMX halted trading operations after suffering an exploit that led to the loss of more than $40 million in user funds. The GMX Crypto Platform Hack forced the exchange to take immediate action to prevent further damage and protect remaining assets. Officials confirmed the incident but have not disclosed specific technical details regarding […]
Thousands of fraudulent web pages disguised as legitimate news outlets, including fake CNN and BBC sites, are being used to promote cryptocurrency investment scams, according to researchers. These pages mimic the design and branding of well-known media platforms to mislead users into believing the content is trustworthy. The scams often feature fabricated celebrity endorsements and […]
European Digital Rights (EDRi) is urging the European Commission to prioritize enforcement of the AI Act rather than diluting existing regulations under the guise of simplification. In an open letter, the digital rights group called on EU leaders to defend the integrity of the AI rulebook and ensure its proper implementation. EDRi urges the EU […]
France Spy Chief Warns that Russia is adapting its hybrid warfare strategies to include more direct and covert ground-level operations. The head of France’s foreign intelligence agency, the DGSE, revealed that Moscow increasingly relies on paid operatives to carry out these activities, signaling a shift in the Kremlin’s approach to influence and destabilization efforts across […]
The Foundation for Defense of Democracies (FDD) is urging the Federal Communications Commission to revoke previously approved equipment authorizations to address national security vulnerabilities in the communications supply chain. In a recent appeal, FDD presses FCC officials to take stronger steps in eliminating risks posed by foreign-manufactured devices that may compromise sensitive infrastructure. The request […]
Airbus joins Swansea University in a new research collaboration aimed at developing cyber-resilient aerospace systems. The partnership targets emerging cybersecurity challenges in the aerospace sector, with a focus on strengthening system defenses and aligning with evolving security standards. The joint effort will explore advanced methods to protect critical aerospace infrastructure from cyber threats. Researchers plan […]
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a new advisory highlighting critical security flaws in Emerson’s ValveLink software, putting manufacturing operations at heightened risk. The Emerson gear flaws expose vulnerable components in industrial control systems, potentially allowing malicious actors to manipulate or disrupt production environments. CISA urged operators to apply necessary updates […]