A cryptocurrency executive inadvertently exposed sensitive information during a Zoom call, leading to a costly breach that unraveled his digital life. The incident occurred when the CEO shared his screen during a virtual meeting, unknowingly revealing private access credentials. The mistake provided cybercriminals with a gateway into his accounts, resulting in the loss of $200,000. […]
A cybercrime group resembling a typhoon in reach and disruption has constructed a network of more than 1,000 compromised devices, according to a new report. The attackers, identified as Chinese hackers, forged an apparently legitimate TLS certificate claiming to be signed by the Los Angeles Police Department (LAPD), in an effort to disguise malicious traffic. […]
Cisco has issued an urgent warning regarding critical security flaws in its Identity Services Engine (ISE) platform, with vulnerabilities rated at the highest severity level. The company flagged the issues as part of its latest security advisory, stating that the flaws could allow remote attackers to execute arbitrary code on affected systems. Cisco flags 10.0 […]
Security operations centers are under mounting pressure to respond faster and more effectively to cyber threats. AI sharpening SOC decisions is changing how analysts interpret and act on risk data. Traditional dashboards often overwhelm teams with fragmented alerts, delaying time-sensitive responses. AI-powered graph technology offers a clearer alternative. These visualizations map out the relationships between […]
Estonian authorities have issued an arrest warrant for a Moroccan national suspected of breaching a sensitive customer card database belonging to Allium UPI, the parent company of the Apotheka pharmacy chain. The intrusion, which occurred in February 2024, reportedly involved unauthorized access to confidential user data, prompting a criminal investigation into the breach. Details about […]
Splunk Inc. has disclosed a cross-site scripting (XSS) vulnerability in its Enterprise and Cloud Platform products that could allow low-privileged users to execute unauthorized JavaScript code. Tracked as CVE-2025-20297, the flaw resides in the PDF generation feature, specifically the pdfgen/render REST endpoint within the Splunk Web interface. The security issue carries a CVSSv3.1 score of […]
A newly discovered strain of the Mirai botnet malware is targeting TBK DVR-4104 and DVR-4216 digital video recorders by exploiting a command injection vulnerability, according to cybersecurity researchers. The flaw allows attackers to remotely execute malicious code on vulnerable devices, effectively hijacking them and adding them to the Mirai botnet network. The malware variant leverages […]
Former affiliates of the Black Basta ransomware group have resurfaced with renewed cyberattack strategies, leveraging familiar and emerging techniques to breach corporate networks, according to a report by ReliaQuest. The attackers continue to rely on email bombing and phishing lures delivered through Microsoft Teams — methods previously linked to their operations — to gain initial […]
Microsoft has delayed the full rollout of its Windows 11 24H2 update, citing unspecified technical issues that surfaced during its latest Patch Tuesday cycle. The company is throttling the distribution of the update to users, signaling potential instability or compatibility concerns that emerged after its initial release. The decision to slow deployment suggests Microsoft is […]
A global account takeover campaign is exploiting a legitimate pentest tool to breach Entra ID environments, targeting over 80,000 user accounts across roughly 100 cloud tenants. The campaign, which escalated in December 2024, uses TeamFiltration—a penetration testing framework released at DefCon30—to compromise Microsoft Office 365 Entra ID users. Researchers at Proofpoint have identified the operation, […]
A former staff member at Evoke Wellness in Hilliard, Ohio, faces criminal charges for allegedly stealing and selling the personal data of at least 240 patients undergoing addiction treatment, according to Cybernews. The Rehab Worker Charged With data theft reportedly accessed confidential information during their time at the facility, raising significant concerns about medical privacy […]
China-linked threat group Salt Typhoon Hackers Hitnaturally targeted a major Canadian telecommunications provider by exploiting a critical Cisco vulnerability, according to a joint warning issued by the Canadian Centre for Cyber Security and the U.S. Federal Bureau of Investigation. The campaign is part of a broader cyber espionage effort aimed at breaching global telecom networks. […]