Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Jaguar Land Rover hit by ransomware: ERP disruption stalls production and strains UK supply chains
Jaguar Land Rover (JLR), owned by Tata Motors, is recovering from a ransomware incident detected in early September 2025 that ...
Phoenix Rowhammer Attack Defeats DDR5 TRR: Root in 109 Seconds (CVE-2025-6202)
Researchers from Google and the COMSEC group at ETH Zurich have disclosed Phoenix, a new Rowhammer technique that circumvents modern ...
Mamont Android Banking Trojan Surges in Russia as Triada Backdoor Reappears with Firmware Infections
According to data collected by Kaspersky for January–August 2025, the Mamont Android banking trojan now shows the broadest activity on ...
Google blocks fraudulent LERS account as hackers tout access to FBI eCheck
Google confirmed it had detected and swiftly disabled a fraudulent account in its Law Enforcement Request System (LERS) after threat ...
DOJ: 57‑Month Sentence for DRM Circumvention and Pre‑Release Blu‑ray Leaks Highlights Insider Threat Risk
The US Department of Justice has sentenced former content supply chain employee Stephen Hale to 57 months in federal prison ...
TA558 (RevengeHotels) uses LLM‑generated loaders to breach hotels and steal payment data
Researchers at Kaspersky have identified a new wave of attacks by the cybercrime group known as RevengeHotels (also tracked as ...
SlopAds Ad-Fraud Network Dismantled: 224 Android Apps Pulled from Google Play
Google has removed 224 malicious Android apps from Google Play linked to the SlopAds ad‑fraud operation. According to Satori Threat ...
Appeals Court Sends BreachForums Admin ‘Pompompurin’ to Prison: What It Means for Cybercrime and Enterprise Risk
A federal appeals court has vacated a previously lenient sentence and imposed a three‑year prison term on 22‑year‑old Connor Brian ...
KioSoft CVE-2025-8699: Vulnerable Prepaid NFC Cards Abused to Inflate Balances, Patch Arrived a Year Later
Security researchers at SEC Consult (Eviden) uncovered a critical flaw in certain KioSoft prepaid NFC cards that power self-service payments ...
Microsoft and Cloudflare Dismantle RaccoonO365 Phishing-as-a-Service Targeting Microsoft 365
Microsoft’s Digital Crimes Unit (DCU) and Cloudflare have jointly disrupted the RaccoonO365 phishing-as-a-service (PhaaS) operation used to steal Microsoft 365 ...