Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Major Data Breach in Spain: 64 Million Records Exposed and a 19‑Year‑Old Suspect
The Spanish National Police have detained a 19‑year‑old resident of Catalonia, suspected of breaching the IT systems of nine companies ...
JS#SMUGGLER: Compromised Websites Used to Deliver NetSupport RAT to Corporate Networks
Researchers at Securonix have documented a sophisticated multi‑stage malware campaign dubbed JS#SMUGGLER, in which attackers compromise legitimate websites and use ...
GlassWorm Malware Strikes Visual Studio Code Marketplace in New Supply Chain Campaign
The malicious GlassWorm malware family, designed to compromise Visual Studio Code (VS Code) development environments, has resurfaced in official extension ...
React2Shell (CVE-2025-55182): Critical React Server Components RCE Under Active Exploitation
The critical React2Shell vulnerability (CVE-2025-55182) in the React ecosystem has moved from a theoretical risk to large‑scale, real‑world exploitation. Within ...
Windows 11 Lock Screen Bug in KB5064081 Hides Password Icon but Keeps Login Working
After the release of the August Windows 11 updates, Microsoft has warned about a new lock screen interface bug affecting ...
Asahi Ransomware Attack: Data of 2 Million People Exposed and Production Halted in Japan
In autumn 2025, global brewing giant Asahi Group Holdings disclosed that a large‑scale cyberattack was far more damaging than initially ...
ShadyPanda Malicious Browser Extensions Expose 4.3 Million Chrome and Edge Users
A multi‑year operation dubbed ShadyPanda, analysed by Koi Security, illustrates how seemingly harmless browser add‑ons can quietly turn into powerful ...
React2Shell (CVE-2025-55182): Critical React 19 Server Components RCE Vulnerability
The React ecosystem is facing a critical security issue: CVE-2025-55182, informally dubbed React2Shell, a 10.0/10 CVSS remote code execution (RCE) ...
YouTube Age Verification in CIS Countries: Cybersecurity and Privacy Risks
Users from CIS countries, including Belarus, have begun to encounter mandatory YouTube age verification when trying to access videos marked ...
Leroy Merlin France Data Breach: What Happened and How Customers Can Stay Protected
Leroy Merlin’s French division has notified customers of a cyberattack that resulted in the exposure of part of its customer ...
