Rising Software Vulnerabilities: Average Patch Time Nears Nine Months
In an alarming trend, the average time to fix software vulnerabilities has now reached nearly nine months, according to Veracode’s...
News
Chinese Cyber Espionage Surges 150%: Insights from CrowdStrike
In 2024, Chinese cyber espionage operations have risen dramatically, with a reported 150% increase according to CrowdStrike's latest findings. Recent...
DragonForce Ransomware Targets Saudi Firm, Stealing 6TB of Data
A significant ransomware incident was reported as DragonForce launched an attack on a prominent Saudi firm, leading to the theft...
Geopolitical Tensions Boost APT Attacks and Hacktivism in 2024
Geopolitical tensions have significantly increased advanced persistent threat (APT) incidents and hacktivism in 2024, according to recent findings by Group-IB....
Data Breach Affects 3.3M Individuals: DISA Global Solutions Responds
DISA Global Solutions has confirmed a significant data breach affecting the sensitive information of over 3.3 million people involved in...
HaveIBeenPwned Adds 244 Million Stolen Passwords From Infostealers
HaveIBeenPwned (HIBP) has significantly expanded its database, adding 244 million compromised passwords and 284 million email addresses sourced from infostealer...
Ransomware Attack Exposes Genea IVF Patient Data Online
A recent ransomware attack has resulted in the publication of sensitive patient data from Genea, an IVF clinic, by the...
Signal Threatens to Leave Sweden Over Proposed Encryption Backdoor Law
Signal, the leading end-to-end encrypted messaging app, considers exiting Sweden due to proposed government legislation affecting user privacy. In a...
API-Related Security Issues: 99% of Organizations Affected
In today's digital landscape, API-related security issues are a pressing concern, as highlighted by 99% of organizations reporting challenges in...
Deepfake Phone Scams: A Quarter of Brits Affected Amid Rising Fraud
Deepfake phone scams have become alarmingly prevalent, affecting a quarter of Brits and prompting global concern over fraudulent communications. Global...
61% of Cybercriminals Deploy New Exploit Code Within 48 Hours of Attack
In 2024, a staggering 61% of cybercriminals are innovating quickly, deploying new exploit code within just 48 hours of identifying...
Chinese Botnet Bypasses MFA in Microsoft 365: Rising Threats to Cybersecurity
The emergence of a new Chinese botnet poses significant threats to the security of Microsoft 365 accounts, easily bypassing Multi-Factor...
Ransomware Attacks Focus on Data Exfiltration Over Encryption
Ransomware attacks are increasingly prioritizing data exfiltration instead of encryption, with over 80% of incidents in the last year adopting...
Chinese Hacking Group Silver Fox Compromises Healthcare Networks with Malware
The recent surge in cybersecurity threats highlights how hackers like Silver Fox are infiltrating healthcare networks, risking sensitive patient information....
Ghostwriter Cyber-Attack Targeting Ukrainian and Belarusian Opposition: New Tactics Emerged
The Ghostwriter cyber-attack has shifted focus, intensifying efforts against Ukrainian and Belarusian opposition groups using advanced tactics. A new wave...
F5 Products Multiple Vulnerabilities
Multiple vulnerabilities were identified in F5 Products, attacker can exploit this vulnerability to trigger remote code execution, denial of service...
Adobe ColdFusion Multiple Vulnerabilities
Multiple vulnerabilities were identified in Adobe ColdFusion. A remote attacker could exploit some of these vulnerabilities to trigger remote code...
Bybit Offers $140 Million Bounty for Recovery of Stolen Cryptocurrency
Bybit is offering a 10% reward on recovered funds in its efforts to reclaim $1.4 billion lost in a massive...
Michigan Man Indicted for Dark Web Credential Fraud: A Look into Cybercrime Tactics
A Michigan man has been indicted for wire fraud and identity theft after allegedly acquiring nearly 2,500 stolen login credentials...
Quantum-Resistant Digital Signatures Now Available in Google Cloud KMS
Google Cloud has introduced quantum-safe digital signatures within its Cloud Key Management Service (Cloud KMS), ensuring enhanced security against quantum...
XSS Vulnerability in Essential Addons for Elementor: A Critical Alert
A significant XSS vulnerability has emerged in Essential Addons for Elementor, affecting over 2 million WordPress sites and demanding immediate...
IT/OT Convergence: Addressing Cyber Incidents in Manufacturing
The integration of IT and operational technology (OT) is essential for modern manufacturing, but it has also resulted in increased...
UK Government Faces Backlash Over Disastrous Apple Encryption Decision
Security and consumer rights experts are calling for accountability from the UK government after the alarming removal of end-to-end encryption...
US-CERT Vulnerability Summary for the Week of February 17, 2025
The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded in the past week. In some...
