A state-sponsored threat actor affiliated with APT37 (and the KONNI activity cluster) has been observed abusing Google Find Hub to geolocate Android devices and perform remote wipes after credential...
SuperGrosz, a Poland-based online loan platform run by AIQLABS, disclosed a major security incident that exposed sensitive personal and financial data for thousands of customers. National authorities...
Summary: A critical improper access control vulnerability in Gladinet Triofox, tracked as CVE-2025-12480, has been exploited in the wild to bypass authentication, upload arbitrary payloads, and...
Microsoft’s November security update closes a locally exploitable Windows Kernel elevation of privilege vulnerability that was observed in the wild. Administrators must prioritize deployment to...
Bulwark is a commercialized evasion packer and toolkit first observed in 2025. It is sold to operators to hide Windows payloads from endpoint detection platforms by transforming binaries at runtime,...
A sophisticated intrusion through a third-party contractor compromised employee systems and unclassified documents, marking a major escalation in nation-state cyber operations. ...
Date: November 10, 2025 Overview: A newly identified campaign attributed to the North Korean threat actor APT37 (also known as “ScarCruft”) has been found abusing Google’s Find Hub service for...
Chinese cybersecurity firm KnownSec Information Technology Co., Ltd. has suffered a major data breach that resulted in the leak of thousands of internal files. The exposed data reportedly includes...
Intel Corporation has disclosed an insider data theft involving a former software engineer accused of stealing approximately 18,000 confidential and proprietary files before leaving the company. The...
Critical Exposure of Proprietary Telecom Infrastructure Code Published on November 10, 2025 In a significant cybersecurity...
A coordinated wave of cyberattacks disrupts manufacturing, legal, and HR sectors Published: November 9, 2025 In a troubling escalation of cyber threats, the...
Phishing-as-a-Service, or PhaaS, has evolved into a mature criminal economy. Platforms now offer complete phishing kits, automation tools, and even customer support for attackers with minimal...
Date: November 9, 2025 Overview: Security researchers have disclosed a widespread targeted spyware operation — dubbed “LANDFALL” — that exploited a zero-day vulnerability in a Samsung...
The cybersecurity community is on high alert following a critical advisory issued by the Indian Computer Emergency Response Team (CERT-In). The national cyber defense agency has urged millions of...
University of Pennsylvania Data Breach: A Major Cybersecurity Wake-Up Call body { font-family: Arial, sans-serif; line-height: 1.6; margin: 0; ...
:max_bytes(150000):strip_icc()/capitol-da75651b0b134d4c99735cb3239f842d.jpeg)
The U.S. Congressional Budget Office confirmed it was the victim of a cyber attack that disrupted internal communications and certain data systems. The agency, which provides nonpartisan economic and...
The Washington Post said it was affected by a cyber incident linked to Oracle E-Business Suite. The disclosure followed external reporting and listings on an extortion site that named multiple...
Five High-Severity Vulnerabilities Patched – Immediate Update Required Published: November 7, 2025 ⚠️ Action Required: All Chrome users on Windows, macOS, Linux, Android,...
November 6, 2025 In a troubling escalation of cybersecurity threats facing the automotive sector, Hyundai AutoEver America (HAEA), a key IT subsidiary of the Hyundai Motor...
The cybersecurity landscape has been fundamentally altered following a startling new discovery by the Google Threat Intelligence Group (GTIG). In a recent report, Google unveiled an...