A proof-of-concept exploit targeting a recently patched macOS flaw has been made public, raising concerns among cybersecurity experts. The vulnerability, tracked as CVE-2025-31258, affects the RemoteViewServices framework, which handles content rendering and preview features in macOS. The flaw allows malicious applications to partially escape Apple’s sandbox protections, potentially exposing sensitive system resources and user data. […]
Google is introducing a range of new security enhancements in its upcoming Android 16 operating system update, aiming to bolster protection for mobile users. The upgrade, announced this week, includes a suite of advanced features designed to detect and prevent scams, secure personal data, and enhance user privacy. While specific tools were not detailed in […]
Law enforcement agencies from five European nations, with coordination from Europol and Eurojust, have dismantled a cross-border cybercrime operation responsible for defrauding over 100 victims through fraudulent investment schemes, according to Infosecurity Magazine. The transnational syndicate is accused of orchestrating sophisticated scams that generated illicit profits exceeding 3 million euros. Authorities say the group lured […]
Ireland’s Data Protection Commission (DPC) has approved Meta’s plans to use data from European Union users to train its artificial intelligence systems, clearing a regulatory hurdle for the tech giant. The decision marks a significant step forward in Meta’s ambitions to develop AI capabilities using data sourced from its platforms across the EU. However, the […]
EC-Council has secured reaccreditation from the United Kingdom’s National Cyber Security Centre (NCSC), reaffirming the credibility of five of its cybersecurity certification programs. The renewed endorsement strengthens EC-Council’s standing in the global cybersecurity training landscape, particularly within professional and government sectors that rely on recognized qualifications to meet industry standards. The reaccreditation ensures that EC-Council’s […]
An ongoing international crackdown on cybercrime has resulted in the takedown of 300 domains linked to ransomware activity, according to an announcement from authorities leading the effort. Dubbed Operation Endgame, the initiative targets key infrastructure used by cybercriminals to orchestrate and deploy ransomware campaigns across global networks. The seized domains were reportedly central to the […]
Global law enforcement agencies and technology firms have coordinated an international operation to disrupt Lumma, a widely used infostealer favored by cybercriminal gangs. Authorities from the United States, Europe, and Japan executed the takedown with support from major tech companies, including Microsoft and Cloudflare. Lumma has been identified as a prevalent tool in the cybercrime […]
A newly identified threat actor known as “Hazy Hawk” is exploiting misconfigured Domain Name System (DNS) records to hijack subdomains tied to abandoned cloud services, according to researchers at Infoblox. Active since at least December 2023, Hazy Hawk targets high-profile organizations—including government agencies, Fortune 500 companies, and universities—by leveraging a technique called CNAME hijacking. The […]
Zscaler said Tuesday it plans to acquire Red Canary, a provider of Managed Detection and Response (MDR) services, as part of a broader push to enhance its cybersecurity platform with artificial intelligence and automation. The deal is aimed at strengthening Zscaler’s security operations by combining AI-driven capabilities with Red Canary’s expertise in threat detection and […]
Croatia is preparing to implement new artificial intelligence regulations, prompting concerns from digital rights activists who argue that the proposed framework may fall short of protecting fundamental rights. While the country aligns its legislative efforts with the European Union’s AI Act, campaigners are urging Croatian lawmakers to adopt additional safeguards that go beyond the EU-wide […]
Hewlett Packard Enterprise has issued a security bulletin warning customers of eight vulnerabilities affecting its StoreOnce systems, including a critical authentication bypass flaw. StoreOnce is HPE’s disk-based backup and deduplication solution, widely used for data protection and storage efficiency. The company flagged the issues as significant, urging users to take immediate action to mitigate potential […]
A sprawling malware distribution campaign has compromised more than 140 GitHub repositories, targeting inexperienced cybercriminals and gaming cheat users through deceptive code laced with backdoors, according to researchers at Sophos. The scheme, attributed to a user linked with the email address ischhfd83@rambler.ru, dates back to at least November 2023. Of the 141 repositories analyzed, 133 […]