Tag: cyber security
4316 articles
software supply chain Must-Have Fix for Risky Systems
The OpenSSF warns that the critical infrastructure powering npm, PyPI and other registries is underfunded and increasingly vulnerable—if we don’t invest now, supply‑chain attacks and outages will be far costlier later. It’s time for governments, companies, and the community to share the bill and make the software plumbing resilient.
Iran-backed hackers: Exclusive Dangerous Espionage
Think that job email was real? Researchers warn Iran‑linked hackers are using fake recruitment pages to deliver MiniJunk backdoors and MiniBrowse stealers to European aerospace and related sectors, so organizations and applicants should harden hiring workflows and treat unsolicited offers with caution.
lateral movement: Stunning 18-Minute Risky Surge
Attackers now break out in a median of just 18 minutes, not hours, so organizations must embrace zero-trust, strong identity controls, segmentation and automated detection to stop breaches before they can spread.
political attribution: Risky, Stunning Misstep
When bank apps, council sites and supermarket loyalty systems all hiccup, Chancellor Rachel Reeves pointed the finger at Moscow — but thin public evidence and sceptical security experts suggest the truth could be messier. The row highlights how rushed political blame can backfire and why the UK urgently needs clearer, evidence-based rules for naming cyber attackers.
third-party breaches: Stunning, Risky Wake-Up Call
Stellantis warns a third‑party supplier may have exposed customer personal data, leaving millions wondering what may actually means. Customers deserve clear answers about who was affected, what was leaked, and what protections will be offered.
EV charging infrastructure Critical Risk: Must-Fix Leak
An EV charging provider warned some customers that a third‑party security incident may have exposed names and email addresses — a reminder that the clean‑tech convenience we love can still leave personal data vulnerable. Stay alert for phishing, enable MFA where you can, and expect the industry to tighten vendor security as it responds.
Scattered Spider Exclusive: Risky Teen Casino Shocker
A Las Vegas teen surrendered this week in connection with the 2023 Scattered Spider attacks that disrupted casino networks and reportedly caused millions in damage, prompting fresh questions about how minors acquire the skills to hit high-value targets and how justice should respond. The arrest spotlights worrying cybersecurity gaps in the industry and the urgent need to channel youthful technical talent into lawful paths.
Formbook: Exclusive Devastating Phishing Risk
From a biotech lab in Minsk to a tour operator in Almaty, dozens of organizations across Belarus, Kazakhstan and Russia were targeted by a tailored phishing campaign that deployed the notorious Formbook trojan—now linked by researchers to a new actor called ComicForm and possibly tied to SectorJ149. The case is a sharp reminder that proven malware plus savvy social engineering lets small groups steal credentials across sectors, so adding MFA, least‑privilege controls and behavioral monitoring is more important than ever.
ransomware attack: Stunning Risk to European Airports
ENISA says ransomware knocked out check‑in systems at major European airports, forcing staff to go manual and stranding travellers in long queues. The disruption highlights how legacy IT and weak vendor security can turn a cyberattack into a real‑world travel crisis.
ATT&CK Evaluations: Stunning Vendor Exodus Sparks Risk
Three major cybersecurity vendors pulled out of MITRE’s ATT&CK Evaluations over methodology and transparency concerns, leaving buyers with fewer apples‑to‑apples comparisons and prompting a push for clearer, fairer testing. MITRE says it will revise the program — but rebuilding trust will take visible changes and broader industry buy‑in.
fake IC3 pages: Must-See Dangerous Warning
Scammers are cloning the FBI’s IC3 complaint portal, turning the place victims go for help into a data‑harvesting trap. Before you report, verify fbi.gov links, use bookmarks, and follow official contact methods to keep your information safe.
supply-chain cyber-attack: Devastating Airport Chaos
Day three of travel chaos as a supply‑chain cyberattack on a key avionics supplier snarls check‑in, baggage and departures across major European airports — a sharp reminder that our high‑tech travel system can grind to a halt when a single supplier is hit.
Atlantic air travel: Stunningly Risky System Exposed
When ticketing systems failed and fiber cuts disrupted communications across the Atlantic, hundreds of flights were canceled and passengers were left stranded — a vivid reminder that our increasingly digital air travel system can turn fragile in an instant. Airlines, vendors and regulators now face pressure to build stronger backups and clearer contingency plans before the next outage grounds more travelers.
ransomware groups: Stunning, Dangerous Threat to Museums
When ransomware knocked a French museum offline and thieves made off with $705,000 in gold, it became painfully clear that cyberattacks can enable real‑world heists — a wake‑up call for museums and small institutions to protect both their networks and their treasures.
Ivanti EPMM Urgent: Must-Have Fixes for Risky Flaws
Urgent: CISA found attackers exploited Ivanti EPMM flaws to push multiple malware families — if your organization uses this MDM, patch immediately and rotate admin credentials. Lock down management access with MFA and monitor console activity now to prevent a potentially wide-scale breach.
Gamaredon and Turla: Stunning Dangerous Alliance
New research shows Russian state-linked groups Gamaredon and Turla are sharing malware and techniques to scale espionage against Ukrainian government, military and aid organizations — a troubling coordination that widens Moscow’s reach while making defense and attribution much harder.
Scattered Spider gang Exclusive Arrest Exposes Risk
U.K. police arrested 17‑year‑old Thalha Jubair after tracing gift‑card purchases back to the same crypto wallets used in Scattered Spider’s alleged $115M extortion campaign. It’s a striking reminder that sloppy opsec and smart crypto forensics can crack sophisticated social‑engineering rings — and that businesses must tighten people‑centric defenses.
zero-click vulnerability: Stunning Gmail Privacy Risk
Imagine your inbox spilling secrets without you clicking anything — researchers found a zero-click flaw in the ChatGPT Deep Research agent that could let crafted web pages make the agent access and reveal Gmail content while browsing. It’s a wake-up call to tighten permissions and rethink how AI assistants access personal accounts.
ShadowLeak ChatGPT bug: Stunning Serious Risk
A single crafty email was enough to trick ChatGPT’s Deep Research agent into spilling Gmail messages — Radware dubbed the flaw “ShadowLeak” and OpenAI says it’s now patched. It’s a stark reminder that smarter AI assistants can widen the attack surface, so vigilance matters.
fake CAPTCHA pages: Exclusive Dangerous AI Phishing Threat
Think twice before clicking that checkbox — attackers are using AI to spin up lifelike fake CAPTCHAs that harvest credentials and turn a trusted security step into an easy phishing trap.
Scattered Spider: Shocking Arrests Spark Risky Fallout
Two teenagers have been arrested in the U.K. over last August’s Transport for London outages, with authorities linking them to the Scattered Spider hacking collective. The case highlights how young, tech‑savvy actors can trigger big disruptions—and why public systems, law enforcement and policy must adapt quickly.
Silent Courier: Must-Have Secure Portal
MI6’s new Tor portal, Silent Courier, offers step-by-step guidance to help overseas sources contact the agency anonymously — a smart, modern shortcut that could surface lifesaving leads. But putting recruitment on the dark web also sparks tough questions about verification, misuse and source safety.
Ivanti EPMM Critical Risk: Exclusive Malware Warning
CISA is warning that threat actors have exploited critical Ivanti EPMM flaws (CVE-2025-4427/4428) to drop stealthy loaders and listeners that give attackers remote control and a wide blast radius. If you manage EPMM, patch now, lock down access and credentials, and start looking for suspicious listener and remote-execution activity before it’s too late.
SonicWall breach: Critical Exclusive Warning
SonicWall has taken its cloud backup offline and is urging password resets after attackers accessed stored firewall configuration files — potentially exposing admin accounts, keys, VPN settings and network rules. If you manage SonicWall devices, reset credentials, rotate keys, and audit rules and logs now because those exports can act like a blueprint for targeted attacks.