Critical Progress LoadMaster flaw now actively exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity Progress Kemp LoadMaster command injection vulnerability.
🔗️ [Bleepingcomputer] https://link.is.it/XjqFSn
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity Progress Kemp LoadMaster command injection vulnerability.
🔗️ [Bleepingcomputer] https://link.is.it/XjqFSn
Smile, You’re on Camera. Part 2: Hiring Lazarus APT’s IT Workers in a Fake DeFi Startup
See what happened after suspected Lazarus-linked IT workers were hired, from forged identities and AI tools to remote access and supporting infrastructure.
🔗️ [Any] https://link.is.it/L5U6rH
See what happened after suspected Lazarus-linked IT workers were hired, from forged identities and AI tools to remote access and supporting infrastructure.
🔗️ [Any] https://link.is.it/L5U6rH
New Zealand sanctions Russian hackers, propaganda groups over Ukraine war
New Zealand announced new sanctions on Russian hackers, technology companies and Kremlin-linked organizations over their roles in supporting Moscow’s war against Ukraine.
🔗️ [Therecord] https://link.is.it/ngrYNd
New Zealand announced new sanctions on Russian hackers, technology companies and Kremlin-linked organizations over their roles in supporting Moscow’s war against Ukraine.
🔗️ [Therecord] https://link.is.it/ngrYNd
LexisNexis shuts down services after suspicious activity on servers
LexisNexis took its Diligence, Metabase API, and Newsdesk services offline as part of its response to unusual activity on servers hosted and managed by an unnamed third-party vendor.
🔗️ [Bleepingcomputer] https://link.is.it/uXSonq
LexisNexis took its Diligence, Metabase API, and Newsdesk services offline as part of its response to unusual activity on servers hosted and managed by an unnamed third-party vendor.
🔗️ [Bleepingcomputer] https://link.is.it/uXSonq
Valve notifies Steam hardware customers of a data breach
Video game publisher and digital distribution giant Valve is notifying Steam hardware customers in Europe that hackers stole their data after hacking its shipping partner, CEVA Logistics.
🔗️ [Bleepingcomputer] https://link.is.it/yMAkcS
Video game publisher and digital distribution giant Valve is notifying Steam hardware customers in Europe that hackers stole their data after hacking its shipping partner, CEVA Logistics.
🔗️ [Bleepingcomputer] https://link.is.it/yMAkcS
China-linked hackers turning popular cybersecurity tool into ransomware launchpad, Microsoft warns
A China-linked threat actor is believed to be exploiting a critical vulnerability affecting cybersecurity software from the company N-able.
🔗️ [Therecord] https://link.is.it/pqo7QK
A China-linked threat actor is believed to be exploiting a critical vulnerability affecting cybersecurity software from the company N-able.
🔗️ [Therecord] https://link.is.it/pqo7QK
Ransomware Now Shows Up in Nearly Half of All Breaches: A Survival Playbook for Lean Security Teams
A ransomware incident response plan helps teams prepare for rising attacks. Explore 2025-2026 ransomware data, RaaS threats, recovery and prevention.
🔗️ [Cyble] https://link.is.it/URC31Y
A ransomware incident response plan helps teams prepare for rising attacks. Explore 2025-2026 ransomware data, RaaS threats, recovery and prevention.
🔗️ [Cyble] https://link.is.it/URC31Y
Member of The Com sent to prison for blackmail, sextortion
A member of "The Com," a loose-knit online cybercrime collective that targets children and teenagers, has been sentenced to two years in prison for blackmail and sextortion offenses against nearly 120 victims worldwide.
🔗️ [Bleepingcomputer] https://link.is.it/5woKM8
A member of "The Com," a loose-knit online cybercrime collective that targets children and teenagers, has been sentenced to two years in prison for blackmail and sextortion offenses against nearly 120 victims worldwide.
🔗️ [Bleepingcomputer] https://link.is.it/5woKM8
CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs
CISA has confirmed that ransomware gangs have begun exploiting two recently patched SonicWall SMA1000 vulnerabilities, including a maximum-severity server-side request forgery (SSRF) flaw.
🔗️ [Bleepingcomputer] https://link.is.it/4CbCej
CISA has confirmed that ransomware gangs have begun exploiting two recently patched SonicWall SMA1000 vulnerabilities, including a maximum-severity server-side request forgery (SSRF) flaw.
🔗️ [Bleepingcomputer] https://link.is.it/4CbCej
When Credentials Are No Longer Enough: Device Trust in the AI Era
AI is making phishing, credential theft, and social engineering faster and more efficient, while traditional trust signals such as passwords, MFA, IP reputation, and geolocation become easier to bypass. Specops explains why organizations are increasingly adding device trust to their Zero Trust strategies.
🔗️ [Bleepingcomputer] https://link.is.it/vVnhkt
AI is making phishing, credential theft, and social engineering faster and more efficient, while traditional trust signals such as passwords, MFA, IP reputation, and geolocation become easier to bypass. Specops explains why organizations are increasingly adding device trust to their Zero Trust strategies.
🔗️ [Bleepingcomputer] https://link.is.it/vVnhkt
British ‘Com’ member who abused more than 100 girls worldwide jailed for two years
Justin Swaddle, of Leeds in northern England, targeted 117 female victims aged 13 to 17, according to the National Crime Agency.
🔗️ [Therecord] https://link.is.it/EYfXc7
Justin Swaddle, of Leeds in northern England, targeted 117 female victims aged 13 to 17, according to the National Crime Agency.
🔗️ [Therecord] https://link.is.it/EYfXc7
Senate Democrats introduce bill to distribute $300 million annually to shore up water system cybersecurity
Two Democratic senators introduced legislation that would allocate $300 million each year to fund cybersecurity improvements for the water and wastewater sector.
🔗️ [Therecord] https://link.is.it/jhlncU
Two Democratic senators introduced legislation that would allocate $300 million each year to fund cybersecurity improvements for the water and wastewater sector.
🔗️ [Therecord] https://link.is.it/jhlncU
Poland uncovers second heat plant cyberattack that went hidden for months
The incident occurred on the same day as coordinated cyberattacks struck more than 30 other renewable energy installations and a larger heat plant, as Poland publicly disclosed in January.
🔗️ [Therecord] https://link.is.it/OpsqBw
The incident occurred on the same day as coordinated cyberattacks struck more than 30 other renewable energy installations and a larger heat plant, as Poland publicly disclosed in January.
🔗️ [Therecord] https://link.is.it/OpsqBw
Russian military hackers pose as recruiters to target Ukrainian IT workers
Ukraine’s computer emergency response team, CERT-UA, said Saturday that the campaign has been running since at least May and is linked to Sandworm, the notorious hacking unit associated with Russia’s GRU military intelligence agency.
🔗️ [Therecord] https://link.is.it/6cchrZ
Ukraine’s computer emergency response team, CERT-UA, said Saturday that the campaign has been running since at least May and is linked to Sandworm, the notorious hacking unit associated with Russia’s GRU military intelligence agency.
🔗️ [Therecord] https://link.is.it/6cchrZ
AI, ora controlli preventivi sui modelli: il blocco di Astra, le regole di Trump
Gli Usa procedono con cautela contro il rischio incontrollato dell'AI. OpenAI ha sospeso parte delle attività interne sul nuovo modello Astra, per pericoli cybersecurity. Il Governo Trump sperimenta un patto volontario per la sicurezza AI. Si cerca un difficile equilibrio tra sicurezza e innovazione, con conseguenze globali
🔗️ [Cybersecurity360] https://link.is.it/W5nfzm
Gli Usa procedono con cautela contro il rischio incontrollato dell'AI. OpenAI ha sospeso parte delle attività interne sul nuovo modello Astra, per pericoli cybersecurity. Il Governo Trump sperimenta un patto volontario per la sicurezza AI. Si cerca un difficile equilibrio tra sicurezza e innovazione, con conseguenze globali
🔗️ [Cybersecurity360] https://link.is.it/W5nfzm
New StormEncryptor ransomware used by former Medusa affiliate
A financially motivated threat actor previously associated with the Medusa ransomware operation is now deploying a new ransomware strain called StormEncryptor.
🔗️ [Bleepingcomputer] https://link.is.it/Is8NmY
A financially motivated threat actor previously associated with the Medusa ransomware operation is now deploying a new ransomware strain called StormEncryptor.
🔗️ [Bleepingcomputer] https://link.is.it/Is8NmY
Data Center Physical Security: Mitigating FPV Drone Threats
We explore how shifting online sentiment and low-cost FPV technology are creating an unprecedented airborne threat vector.
🔗️ [Flashpoint] https://link.is.it/jDk15g
We explore how shifting online sentiment and low-cost FPV technology are creating an unprecedented airborne threat vector.
🔗️ [Flashpoint] https://link.is.it/jDk15g
FBI, South Korea warn of Gunra ransomware gang targeting critical infrastructure
The Gunra ransomware gang is breaching critical infrastructure organizations through vulnerabilities in popular brands of firewalls, the FBI and South Korea’s government warned.
🔗️ [Therecord] https://link.is.it/iGlhAe
The Gunra ransomware gang is breaching critical infrastructure organizations through vulnerabilities in popular brands of firewalls, the FBI and South Korea’s government warned.
🔗️ [Therecord] https://link.is.it/iGlhAe
OpenAI releases ChatGPT 5.6 Cyber, but it's only for approved users
OpenAI has developed a new model called "GPT 5.6 Cyber," designed for vulnerability research, penetration testing, incident response, and remediation.
🔗️ [Bleepingcomputer] https://link.is.it/3UBKxB
OpenAI has developed a new model called "GPT 5.6 Cyber," designed for vulnerability research, penetration testing, incident response, and remediation.
🔗️ [Bleepingcomputer] https://link.is.it/3UBKxB
BdThemes plugins supply-chain hack creates rogue WordPress admins
A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators' browsers to create rogue admin accounts.
🔗️ [Bleepingcomputer] https://link.is.it/OHaOoK
A threat actor compromised the upstream infrastructure of BdThemes, a developer of premium WordPress web-design tools, and modified a remote JSON feed delivered to administrators' browsers to create rogue admin accounts.
🔗️ [Bleepingcomputer] https://link.is.it/OHaOoK
Hackers breached a small Polish energy plant via private APN last year
Hackers breached a heat-and-power plant facility in Poland, which supplies heat to about 50,000 residents, using a private APN (Access Point Name) to access an OT (Operational Technology) network.
🔗️ [Bleepingcomputer] https://link.is.it/gQ23us
Hackers breached a heat-and-power plant facility in Poland, which supplies heat to about 50,000 residents, using a private APN (Access Point Name) to access an OT (Operational Technology) network.
🔗️ [Bleepingcomputer] https://link.is.it/gQ23us