Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Cybercriminals Leverage AWS SSE-C Encryption for Sophisticated Ransomware Attacks
Security researchers at Halcyon have unveiled a sophisticated ransomware technique that exploits Amazon Web Services’ (AWS) legitimate encryption functionality. This ...
Major Security Flaw in Google Sign-In Authentication Threatens Defunct Startup Data
Security researchers at Trufflesecurity have uncovered a significant vulnerability in Google’s OAuth authentication system that poses a severe risk to ...
Microsoft Discovers Sophisticated Cyber Campaign Targeting AI Services
Microsoft’s Digital Crimes Unit (DCU) has uncovered a sophisticated cyber attack campaign targeting artificial intelligence services, where threat actors leveraged ...
FortiGate Security Breach: Confidential Data of 15,000 Devices Exposed on Dark Web
A significant cybersecurity incident has emerged as the hacking group Belsen Group released sensitive data from over 15,000 FortiGate devices ...
Critical WordPress Attack Campaign Discovered: Over 5,000 Sites Compromised
Security researchers at c/side have uncovered a sophisticated cyber attack campaign targeting WordPress websites, with over 5,000 sites already compromised. ...
Advanced Persistent Threat Group Launches Targeted Attacks Against Defense Contractors
Cybersecurity researchers at FACCT have uncovered a sophisticated phishing campaign targeting defense and industrial enterprises. The operation, attributed to the ...
Major Cryptocurrency Mixer Operators Charged in International Money Laundering Investigation
The U.S. Department of Justice has unveiled charges against three operators of cryptocurrency mixing services Blender.io and Sinbad.io in a ...
Critical Security Incident: Path of Exile 2 Administrative Access Breach Results in Massive Virtual Asset Theft
A significant security breach has been reported by Grinding Gear Games (GGG), affecting their flagship title Path of Exile 2. ...
Critical Security Flaw Discovered in Nuclei Scanner Enables Code Execution
Security researchers at Wiz have uncovered a significant vulnerability (CVE-2024-43405) in the widely-used Nuclei security scanning tool, rated at 7.4 ...
DoubleClickjacking: Novel Attack Method Threatens Web Security
Security researcher Paulos Yibelo has uncovered a sophisticated new attack vector dubbed “DoubleClickjacking,” which effectively circumvents established clickjacking protection mechanisms. ...