A ransomware attack disrupted operations at several major European airports over the weekend, causing widespread delays and confusion for travelers. The Ransomware Attack Disrupts Majornaturally check-in and boarding systems, leaving airlines and passengers grappling with significant service interruptions. Security teams moved quickly to isolate affected networks and begin recovery efforts. Authorities confirmed that the cyberattack […]
Britain’s Secret Intelligence Service, MI6, has launched a new recruitment initiative by creating a secure portal on the dark web. The move, described as a way to simplify communication for potential agents, marks a significant shift in how the agency engages with candidates. MI6 launches dark web access to offer anonymity and protection for those […]
European Digital Rights (EDRi) and its coalition partners from Resist Europol have submitted a critical response to the European Commission’s recent call for evidence on potential reforms to Europol’s mandate. In their submission, EDRi blasts Europol power, warning that expanding the agency’s authority could threaten fundamental rights and digital freedoms across the European Union. The […]
A cyberattack on Collins Aerospace disrupted airport operations across Europe, forcing Heathrow, Brussels, and Berlin airports to shift to manual check-in procedures. The Collins cyberattack snarls flights across these major hubs, triggering long delays, flight cancellations, and widespread passenger frustration starting Friday night. Collins Aerospace, a subsidiary of RTX, supplies the Muse software used for […]
Threat actors linked to North Korea have deployed deceptive job scams to deliver malware into cryptocurrency and retail companies, according to new findings. The campaign used ClickFix-style lures to target marketing and trader roles, avoiding the typical focus on software developers. DPRK hackers target crypto naturally through these socially engineered schemes, exploiting job-seeking platforms to […]
Microsoft has addressed a critical security flaw in Entra ID that could have allowed attackers to impersonate users across any tenant, including those with Global Administrator privileges. The vulnerability, tracked as CVE-2025-55241, received a maximum CVSS severity score of 10.0. Microsoft fixes Entra ID to prevent abuse of this token validation failure, which posed a […]
Hundreds of flights across Europe and the United States faced delays and cancellations after a cyberattack and cable cuts grounded key airline systems. Disruptions began when Collins, a major airline ticketing service provider, suffered a suspected cyber breach, crippling its ability to process passenger bookings. Simultaneously, severed cables in Dallas disrupted airport operations, compounding the […]
A China-linked cyberespionage group known as APT41 impersonated a U.S. lawmaker in phishing attacks targeting government agencies, think tanks, and academics focused on U.S.-China trade and policy. The campaign, observed by Proofpoint in July and August 2025, used economic-themed lures to collect intelligence during sensitive trade negotiations between the two nations. APT41, also tracked as […]
A coordinated Russian disinformation campaign has resurfaced online with more than 200 newly created websites, reigniting concerns over foreign interference. The development signals that Russia revives fake news operations ahead of upcoming electoral cycles, even as U.S. federal efforts to counter election misinformation face severe cutbacks under the Trump administration. The network of sites promotes […]
Google has issued an emergency security update for Chrome, addressing four high-severity vulnerabilities in the browser’s latest stable release. The update, pushed to version 140.0.7339.185/.186 for Windows and Mac and 140.0.7339.185 for Linux, includes a critical fix for CVE-2025-10585, a zero-day flaw in the V8 JavaScript engine that is actively being exploited. Google patches Chrome […]
Jenkins, the widely used open-source automation server, has issued a new security advisory addressing several high-severity vulnerabilities. The update, released on September 18, includes fixes for flaws that could enable denial-of-service attacks and unauthorized access. This round of Jenkins fixes flaws that could allow attackers to disrupt operations or compromise build environments. According to the […]
SonicWall confirmed a security breach on September 16, 2025, that compromised its MySonicWall cloud platform. The incident allowed threat actors to access firewall configuration backups stored in the cloud. This SonicWall breach exposes firewall backup data tied to enterprise-level customers, potentially affecting network security settings and policies. The company acknowledged that the intrusion stemmed from […]