Cyber Security
News
Dr.Web Suffers Major Data Breach, Disconnects All Servers
Dr.Web, A Cybersecurity Firm Was Targeted in a Cyberattack Resulting in Data Breach
Cybersecurity
Vanilla Tempest Hackers Use INC Ransomware to Target Healthcare
A recent report from Microsoft reveals that a ransomware affiliate known as Vanilla Tempest has been observed using the INC ransomware to target U.S. healthcare organizations.
News
Compass Group Hit by Medusa Ransomware
The Compass Group, a leading global food services company headquartered in Sydney, has confirmed a significant cyberattack targeting its systems.
Cybersecurity
German Radio Station Hit by Cyberattack: “Emergency Tape” Plays On as Hackers Demand Ransom
Radio Geretsried, a local radio station in Bavaria, has been forced to broadcast music from emergency backups after a ransomware attack crippled its systems.
News
Hunters International Ransomware Claims Breach of ICBC London, Threatens Data Leak
The ransomware group Hunters International has claimed responsibility for a data breach at the London branch of the Industrial and Commercial Bank of China (ICBC), ...
Cybersecurity
Data Breaches Surge to Three-Year High in Australia: A Growing Threat to Privacy and Security
Data Breaches Surge to Three-Year High in Australia
News
23andMe to Pay $30 Million in Class Action Settlement for Data Breach Exposing 6.4 Million Customers
DNA testing giant 23andMe has agreed to pay $30 million to settle a class-action lawsuit stemming from a data breach that compromised the personal ...
Blog
FlyCASS Cockpit Security Breach: A Case Study of SQL Injection and its Impact on Critical Infrastructure
The recent discovery of a critical SQL injection vulnerability in the FlyCASS cockpit access security system should serve as a stark reminder for enterprise businesses: cybersecurity ...
Cybersecurity
This Week In Cybersecurity: 9th September to 13th September
Avis has reported a data breach involving unauthorized access to its business application, exposing customer names and potentially sensitive information.
Blog
What is a Whaling Phishing Attack?
Whaling phishing, also known simply as whaling, is a highly targeted and sophisticated form of phishing attack that specifically targets high-level executives within an organization, such ...
News
Veeam Backup & Replication RCE Flaw: A Looming Threat for Enterprises
A critical vulnerability, CVE-2024-40711, affecting Veeam Backup & Replication (VBR), has emerged as a significant threat to enterprises, with ransomware gangs poised ...
Blog
Cicada3301 Ransomware with New Linux Encryptor: A New Threat To VMware ESXi Systems
A new ransomware-as-a-service (RaaS) operation named Cicada3301 has emerged, posing a significant threat to businesses worldwide. The group has already claimed 19 victims on its ...
News
1.7 Million People Hit in Massive Credit Card Data Breach: What to Do Now?
A major credit card data breach has impacted nearly 1.7 million individuals, raising concerns about the security of sensitive financial information.
Cybersecurity
PIXHELL Acoustic Attack: Leaking Secrets from LCD Screen Noise
A novel acoustic attack named ‘PIXHELL’ can leak secrets from audio-gapped systems, and without requiring speakers, through the LCD monitors they connect to.
Cybersecurity
Indodax Hack: A Major Blow to Indonesian Crypto Security
Hackers targeted Indodax's hot wallet, which is a cryptocurrency wallet that is connected to the internet and used for frequent transactions.
Cybersecurity
LiteSpeed Cache Vulnerability Exposes 6 Million WordPress Sites to Takeover Attacks: A Critical Security Flaw
A critical severity vulnerability has been discovered in LiteSpeed Cache, a popular caching plugin used by over 6 million WordPress sites. The flaw, tracked as ...
News
Russian Military Hackers Linked to Critical Infrastructure Attacks: A Deep Dive into GRU Unit 29155
GRU Unit 29155: A Growing Threat to Global Security
Cybersecurity
This Week In Cybersecurity: 2nd September to 6th September, VK Data Leak Exposes 390 Million Users
VK Data Leak, Voldemort Malware Abusing Google Sheets, DICK’S Sporting Goods Cyberattack and more.
Cybersecurity
Critical Remote Code Execution Flaw in Progress LoadMaster: A 10/10 Severity Vulnerability
This vulnerability, tracked as CVE-2024-7591, allows attackers to remotely execute commands on vulnerable devices, posing a significant risk to organizations relying on these products.
Security Spotlight
Avis Data Breach: Customer Data Stolen in Attack on Business Application
Car Rental Giant Avis Suffers Data Breach, Exposing Customer Information
Application Security
SAP Patches Zero-Day in Commerce Cloud Data Hub Adapter
Application Security
CISA Adds Metabase SQL Injection Zero-Day to KEV With Aug 14 Deadline
Application Security
SharePoint RCE CVE-2026-55040 First Confirmed Ransomware Exploit
TOP CYBERSECURITY HEADLINES
Application Security
SharePoint RCE CVE-2026-55040 First Confirmed Ransomware Exploit
This Week’s Security Spotlight
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Featured Videos
Podcasts
Sorry, we couldn't find any posts. Please try a different search.
Cyber Security News
- All
- Application Security
- Blog
- CVE Vulnerability Alerts
- Cybersecurity
- Cybersecurity Newsletter
- Data Security
- Endpoint Security
- Identity and Access Management
- Information Security
- Network Security
- News
- Phishing
- Podcasts
- Product Reviews
- Ransomware
- Ransomware Victims
- Resources
- Security Spotlight
- Sponsored
- Threat Actors
- Threat Actors
- Threat Detection Tools
Eleven11bot: New Botnet Infects 86,000 Devices for DDoS Attacks
The Eleven11bot botnet has infected over 86,000 IoT devices, primarily focusing on security cameras and NVRs to launch DDoS attacks globally.
Tracking Stingrays: How Rayhunter Shields Your Mobile Privacy
In this episode, we dive into Rayhunter—an open source tool from the EFF designed to detect Stingray devices (cell-site simulators) that compromise your mobile privacy. ...
Outsourcing Cybersecurity Could Save Your Company Millions – Here’s How
The digital landscape is a battlefield, with cyberattacks growing in both frequency and sophistication. Businesses of all sizes, from small enterprises to large corporations, are ...
BackConnect, Microsoft Teams, & Social Engineering—How Ransomware is Adapting
The ransomware landscape is shifting, and Black Basta and Cactus are at the center of it. In this episode, we break down the connections between ...
BianLian Ransomware: Shadow Data Extortion Group
The BianLian ransomware group represents a significant and growing threat to organizations worldwide. Operating with precision and stealth, they have targeted critical infrastructure and private ...
OnlyFans Cyberattacks: Fake CAPTCHAs and Malware Distribution Threaten Users
OnlyFans users are targeted by sophisticated phishing attacks deploying fake Cloudflare CAPTCHAs and malware-laden links, distributing keyloggers and ransomware. Urgent security measures are needed.
Vo1d Botnet Surpasses 1.59 Million Infected Android TVs Across 226 Countries
The Vo1d botnet has infected over 1.59 million Android TVs across 226 countries, enhancing its stealth and operational capabilities significantly.
ClickFix Attack Deploys Havoc C2 via Microsoft SharePoint
A new ClickFix attack is exploiting Microsoft SharePoint to deploy the Havoc framework, tricking users into running malicious PowerShell commands.
CISA Tags Windows and Cisco Vulnerabilities as Actively Exploited
CISA warns that critical vulnerabilities in Cisco and Windows systems are actively exploited, urging federal agencies to secure networks by March 23, 2025.
Trinity Ransomware: The Enigma of the .trinitylock
Overview: Known Aliases of Trinity Ransomware: Trinity Ransomware. Possible links to 2023Lock and Venus ransomware, implying potential shared infrastructure or development. Country of Origin: Not ...
Freddie Mac Data Breach: Social Security Numbers Compromised
Freddie Mac confirms a significant data breach exposing customer names and Social Security numbers. The extent of the breach and its cause remain under investigation. ...
Belgian Intelligence Service Breach: Chinese Hackers Under Investigation
Belgian authorities investigate a potential Chinese state-sponsored cyberattack on its State Security Service (VSSE), compromising sensitive data and emails between 2021 and 2023. The breach ...
Via Credit Union Data Breach Impacts Thousands: Indiana Credit Unions Face Cybersecurity Challenges
Via Credit Union suffered a significant data breach affecting over 60,000 members, exposing sensitive personal and financial data. Interra Credit Union also experienced a smaller ...
Angel One Data Leak: AWS Breach Exposes User Data
Angel One, a leading stockbroking firm, suffered a data leak. Unauthorized access to AWS resources exposed client data. An investigation is underway.
State of Code Security in 2025: A Wiz Report Reveals Critical Vulnerabilities
Wiz's 2025 State of Code Security Report exposes alarming vulnerabilities in code repositories: 61% of organizations have secrets exposed in public repositories, leaving sensitive data ...
Serbian Police Exploit Cellebrite Zero-Day to Unlock Android Phones
Serbian authorities exploited Cellebrite's zero-day Android vulnerabilities (CVE-2024-53104, CVE-2024-53197, CVE-2024-50302) to unlock a phone, raising serious security concerns for enterprises.
Ransomware Groups Use BYOVD Attacks Exploiting Paragon Partition Manager Bug
Critical Paragon Partition Manager vulnerabilities are being exploited in BYOVD attacks, allowing ransomware gangs SYSTEM-level access and execution of malicious code. Urgent patching is advised. ...
Major Data Breach Exposes 33,000+ Users of Flat Earth Zodiac App
A significant data breach impacting the "Flat Earth Sun, Moon and Zodiac" mobile application has exposed the personal information of over 33,000 users. This incident ...