PowerSchool, a widely used educational technology platform in North America, reportedly paid a ransom following a cyberattack. Despite the payment, hackers have shifted tactics and are now targeting individual teachers, according to cybersecurity sources. The attackers are leveraging stolen data to intimidate educators, threatening to expose sensitive information unless additional demands are met. The incident […]
Google has identified a new cyber threat linked to the Russian-backed hacking group ColdRiver, which is deploying an undisclosed malware strain named “LostKeys.” The malware, previously unreported, marks an evolution in the group’s offensive toolkit, signaling heightened capabilities and potential new targets. ColdRiver, known for its persistent cyber-espionage campaigns, appears to be expanding its methods […]
A decades-old proxy botnet that hijacked thousands of vulnerable internet-connected devices has been dismantled in a coordinated operation involving Lumen Technologies’ Black Lotus Labs, the FBI, the U.S. Department of Justice and the Dutch National Police. Active since 2004, the botnet exploited unpatched Internet of Things (IoT) and end-of-life (EoL) devices, primarily in residential networks, […]
A coordinated influence campaign targeting Ukraine’s president has been traced to a network of South African influencers-for-hire, according to new findings from the Atlantic Council’s Digital Forensic Research Lab (DFRLab). The analysis identified more than 40 social media accounts involved in the effort, which aimed to manipulate online discourse through traffic amplification tactics. The campaign […]
A North Korean-linked hacking group known as APT37, also referred to as ScarCruft, has launched a fresh cyber-espionage campaign targeting South Korean entities with ties to national security, analysts at cybersecurity firm Genians said. The group is reportedly using phishing tactics to infiltrate organizations and extract sensitive information. The campaign highlights ongoing cyber threats from […]
Security researchers disclosed a series of critical zero-day vulnerabilities affecting major enterprise platforms during Day Two of the Pwn2Own Berlin 2025 contest, with total winnings reaching $435,000. Hosted at OffensiveCon, the event featured successful exploits targeting VMware ESXi, Microsoft SharePoint, Mozilla Firefox, and Red Hat Enterprise Linux. In a first for the contest, a researcher […]
Akamai has identified a privilege escalation vulnerability in Windows Server 2025, which it is calling ‘BadSuccessor’, raising concerns over Microsoft’s decision not to release an immediate fix. The flaw, according to Akamai, could allow attackers to escalate privileges on affected systems, posing a potential risk to enterprise environments relying on the upcoming server version. Despite […]
CompTIA has introduced a new cybersecurity certification, SecOT+, designed to bridge the skills gap between information technology (IT) and operational technology (OT) professionals. The initiative targets a growing need for cybersecurity expertise in industrial environments, where the convergence of IT and OT systems has introduced new vulnerabilities. The SecOT+ certification aims to equip workers with […]
The U.K. government has confirmed a significant data breach involving the Legal Aid Agency, resulting in the potential exposure of a large volume of sensitive personal information. According to officials, the compromised data pertains to individuals who applied for legal aid, raising concerns that the information may now be in the hands of cybercriminals. The […]
Lovable, a company specializing in Vibe coding, reported a 25% reduction in syntax errors after adopting Claude 4, the latest iteration of the large language model developed by Anthropic. In addition to improved coding accuracy, the company said its development process became 40% faster with the tool’s integration. The update reflects the growing trend of […]
A newly identified information-stealing malware dubbed EDDIESTEALER is using the ClickFix platform as a distribution vector, according to cybersecurity researchers. The malicious software is written in the Rust programming language and employs code obfuscation techniques alongside dynamic command-and-control (C2) tasking, allowing it to evade standard detection tools and adapt to changing environments. EDDIESTEALER’s reliance on […]
Luxury jeweler Cartier is urging customers to remain vigilant against phishing attempts following a data breach that compromised user information. While no highly sensitive or financially valuable data appears to have been stolen in the cyberattack, the incident has raised concerns about the privacy of affected individuals. The company confirmed that the breach led to […]