3 related articles · 85% similarity

Multiple reports detail a rising threat of cryptojacking attacks leveraging misconfigured Docker APIs. Attackers utilize the Tor network to conceal their activities, potentially building botnets and escalating attacks beyond initial compromise. This highlights the critical need for securing Docker APIs to prevent exploitation.

3 related articles · 84% similarity

A data breach at Plex resulted in the theft of user data, including emails, usernames, and password hashes. Plex urges all users to immediately reset their passwords and secure their accounts to prevent further compromise.

3 related articles · 85% similarity

Microsoft's September Patch Tuesday addressed over 80 vulnerabilities across Windows and other products, including publicly known and zero-day exploits allowing privilege escalation. Many of these flaws are considered high-risk, emphasizing the importance of immediate patching.

2 related articles · 83% similarity

Microsoft released cumulative updates for Windows 10 (KB5065429) and Windows 11 (KB5065426 & KB5065431), addressing various security vulnerabilities and issues across different versions. These updates include several bug fixes and improvements to enhance system stability and security.

2 related articles · 80% similarity

The US and China are cracking down on Southeast Asian cybercrime operations, imposing financial sanctions on firms facilitating scams that have stolen over $10 billion from Americans. These actions target networks based in Burma and Cambodia, aiming to disrupt their illicit activities.

3 related articles · 79% similarity

Adobe released emergency patches addressing multiple critical vulnerabilities in ColdFusion, Commerce, and Magento platforms. These flaws, including the SessionReaper vulnerability (CVE-2025-54236), could allow attackers to compromise customer accounts and systems. Users are urged to update immediately.

3 related articles · 76% similarity

Sophisticated phishing attacks using the Salty2FA kit are leveraging tools like Axios and Microsoft's Direct Send to bypass multi-factor authentication (MFA). These attacks demonstrate the increasing sophistication of cybercriminal operations, mirroring legitimate enterprise strategies to achieve highly efficient phishing campaigns.

2 related articles · 94% similarity

SentinelOne is acquiring Observo AI for $225 million in a cash and stock deal. This acquisition will enhance SentinelOne's Security Information and Event Management (SIEM) and data capabilities, improving threat detection and response by separating data ingestion from SIEM.

3 related articles · 93% similarity

The GhostAction supply chain attack compromised over 3,325 secrets from hundreds of GitHub repositories. Attackers exploited GitHub Workflows to steal credentials and access various services like PyPI, npm, and DockerHub. This highlights the vulnerability of software supply chains and the need for enhanced security measures.

2 related articles · 91% similarity

Newly discovered domains reveal a long-running, sophisticated cyber espionage campaign by the China-linked Salt Typhoon (UNC4841) threat actor, dating back to 2020. These domains facilitated persistent, stealthy access to targeted organizations, highlighting the group's advanced capabilities and ongoing operations.

2 related articles · 84% similarity

A new malware campaign, dubbed GPUGate, uses Google Ads and compromised GitHub accounts to deliver malware, primarily targeting IT firms in Western Europe. The sophisticated attacks leverage legitimate platforms to evade detection and deliver malicious payloads.

2 related articles · 81% similarity

Signal now offers an optional end-to-end encrypted cloud backup feature, enabling users to restore chats across devices. This beta feature, initially available for Android, allows for seamless data transfer between operating systems, enhancing user convenience and data preservation.

2 related articles · 76% similarity

Experts warn of the imminent threat of AI-powered autonomous ransomware attacks, with recent proof-of-concept demonstrations highlighting the potential for AI to automate the entire ransomware process, from creation to execution. While current examples are prototypes, they underscore the growing use of AI in enhancing existing ransomware tactics and expanding the scale and sophistication of cyberattacks.

2 related articles · 89% similarity

Canadian fintech company Wealthsimple experienced a data breach due to a supply chain attack, exposing some customer information. While the company assures accounts and funds remain secure, the incident highlights vulnerabilities in third-party services impacting financial institutions.

2 related articles · 89% similarity

The secretive cybercrime group TAG-150 is operating a successful malware-as-a-service (MaaS) operation, distributing the novel CastleRAT Trojan. This RAT, written in Python and C, expands on their existing CastleLoader malware, highlighting their sophisticated capabilities and low-profile approach.

2 related articles · 85% similarity

A sophisticated phishing campaign uses undetectable SVG files to deliver malware, impersonating legitimate websites like Colombia's judicial system. Researchers identified at least 44 such files, highlighting the effectiveness of this stealthy attack vector and the need for enhanced security measures.

2 related articles · 81% similarity

Bruce Schneier's new book, \

11 related articles · 78% similarity

Multiple critical vulnerabilities in SAP NetWeaver and S/4HANA are actively being exploited. These flaws allow remote code execution and privilege escalation, impacting systems globally. Immediate patching of affected systems is crucial to prevent compromise.

2 related articles · 84% similarity

Cybercriminals are exploiting X's Grok AI to bypass advertising restrictions and spread malicious links. This new technique allows scammers to distribute malware to a larger audience, circumventing X's safety measures and reaching millions of users.

2 related articles · 80% similarity

The Czech Republic's National Cyber and Information Security Agency (NUKIB) has issued a warning against using Chinese technology in critical infrastructure, citing concerns about data being sent back to China and potential security risks. This advisory highlights growing anxieties about the security implications of utilizing Chinese tech in sensitive sectors.

3 related articles · 79% similarity

Google faces substantial fines totaling over $4 billion from the EU and France for anti-competitive advertising practices and violations of cookie regulations. These penalties highlight growing regulatory scrutiny of Google's dominance in the digital advertising and data privacy sectors.

2 related articles · 79% similarity

Michael Pratt, the ringleader of the GirlsDoPorn sex trafficking operation, was sentenced to 27 years in prison. Prior to sentencing, Pratt and his attorney attempted to portray him as reformed, but the court ultimately handed down a significant sentence reflecting the severity of his crimes.

2 related articles · 90% similarity

The Russian APT28 hacking group is using a new malware, 'NotDoor', to exploit Microsoft Outlook and target companies in NATO countries for data exfiltration. This sophisticated backdoor allows for covert data theft, highlighting ongoing cyber warfare activities.

3 related articles · 89% similarity

Cloudflare successfully mitigated a massive 11.5 Tbps distributed denial-of-service (DDoS) attack, setting a new record for the largest attack ever mitigated. The attack, which lasted an unspecified time, highlights the increasing sophistication and scale of cyber threats targeting online services.

3 related articles · 85% similarity

Multiple critical vulnerabilities in TP-Link routers are being actively exploited, prompting CISA to issue warnings and add the flaws to its Known Exploited Vulnerabilities catalog. These include a newly discovered zero-day and previously known flaws, highlighting the urgent need for users to update their firmware.

9 related articles · 82% similarity

A significant supply chain attack compromised numerous popular npm packages, impacting over 2 billion weekly downloads. Attackers used phishing to gain access and injected malware, stealing cryptocurrency wallet keys and potentially other sensitive data. The attack highlights vulnerabilities in open-source software ecosystems.

2 related articles · 82% similarity

Iranian hackers, possibly linked to the Ministry of Intelligence and Security (MOIS), launched a large-scale phishing campaign targeting over 100 email accounts at embassies, ministries, and international organizations across six continents. This multi-wave operation aimed to spy on numerous countries and organizations, highlighting a significant threat to global security.

2 related articles · 79% similarity

Stealerium malware secretly captures webcam images of users watching pornography, then uses this compromising material for sextortion. The freely available malware automatically detects NSFW content and leverages the recordings for blackmail schemes, highlighting a growing cybercrime trend.

7 related articles · 80% similarity

A compromised Salesloft GitHub account in March triggered a massive supply chain attack, resulting in the theft of OAuth tokens and subsequent data breaches across numerous companies, including prominent cybersecurity firms and Salesforce instances. The full extent of the damage is still being assessed.

2 related articles · 78% similarity

Google released September 2025 Android security updates addressing over 120 vulnerabilities, including two actively exploited zero-day flaws. These critical patches are vital for Android 15 and 16 users to protect against ongoing attacks.

7 related articles · 78% similarity

A critical zero-day vulnerability in Sitecore CMS is under active exploitation, allowing attackers to inject malicious code without authentication. The flaw involves exposed ASP.NET machine keys, leading to ViewState deserialization attacks and the deployment of malware like WeepSteel. Multiple government agencies and security firms have issued urgent warnings and patches.