Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
React2Shell (CVE-2025-55182): Critical React 19 Server Components RCE Vulnerability
The React ecosystem is facing a critical security issue: CVE-2025-55182, informally dubbed React2Shell, a 10.0/10 CVSS remote code execution (RCE) ...
YouTube Age Verification in CIS Countries: Cybersecurity and Privacy Risks
Users from CIS countries, including Belarus, have begun to encounter mandatory YouTube age verification when trying to access videos marked ...
Leroy Merlin France Data Breach: What Happened and How Customers Can Stay Protected
Leroy Merlin’s French division has notified customers of a cyberattack that resulted in the exposure of part of its customer ...
Android Banking Trojan in Russia Disguised as YouTube and TikTok 18+ Apps
Security analysts from F6 (Digital Risk Protection) have identified a large-scale malicious campaign targeting Android users in Russia. Cybercriminals are ...
Massive IP Camera Hack in South Korea Exposes 120,000 Devices and Alarming IoT Security Failures
A large-scale cybercrime investigation in South Korea has revealed the compromise of more than 120,000 IP surveillance cameras installed in ...
Thousands of Active Secrets Exposed in Public GitLab Cloud Repositories
A large-scale analysis of public GitLab Cloud repositories has revealed tens of thousands of exposed credentials and API keys that ...
SmartTube Android TV Client Compromised in Supply Chain Attack
SmartTube, a popular open‑source YouTube client widely installed on Android TV devices, TV boxes, and streaming sticks like Amazon Fire ...
Albiriox: New Android Banking Trojan-as-a-Service Targets 400+ Financial and Gaming Apps
A new Android banking trojan called Albiriox has surfaced on Russian‑language cybercrime forums, where it is being sold under a ...
New Outlook Attachment Error Blocks Files with Non‑ASCII Names in Exchange Online
On 23 November 2025, some Exchange Online customers using the new Outlook client began reporting that Excel attachments could no ...
Aisuru IoT Botnet Sets New Record With 29.7 Tbps Hyper‑Volumetric DDoS Attack
The Aisuru botnet has set a new benchmark for distributed denial-of-service (DDoS) attacks, delivering peak traffic of 29.7 Tbps in ...
