Go-Based Malware Executes XMRig Miner on Linux Systems Through Exploitation of Redis Configuration Vulnerabilities
Cybersecurity researchers have identified a new Linux cryptojacking campaign targeting publicly accessible Redis servers, named RedisRaider by Datadog Security Labs. This malicious activity involves aggressive scanning of randomized…

Emergency Updates for Windows 10 Address BitLocker Recovery Challenges
Microsoft has issued emergency out-of-band updates to address a critical issue that causes Windows 10 systems to enter BitLocker recovery mode following the installation of the May 2025 security…

Consumer Vulnerability to Social Media Fraud Ads Reaches 50%
Around half of consumers in both the UK and the US have reported being targeted by social media advertisements that promote retail fraud guides and services, along with disguised…

Chinese Cyber Threat Actors Implement MarsSnake Backdoor in Prolonged Campaign Against Saudi Organization
Threat hunters have uncovered the tactics of a China-aligned threat actor known as UnsolicitedBooker, which targeted an undisclosed international organization in Saudi Arabia with a previously undocumented…

Arla Foods Acknowledges Cybersecurity Breach Impacting Production and Leading to Operational Delays
Arla Foods has recently acknowledged that it suffered a cyberattack that has significantly disrupted its production operations. The company clarified that the attack specifically impacted its facility in Upahl,…

Regeneron Commits to Enhancing Security Measures Following Acquisition of 23andMe
The planned acquisition of the genetic testing company 23andMe by Regeneron Pharmaceuticals has raised significant concerns about the future of data security and customer privacy. In a recent announcement…

Emergence of Nitrogen Ransomware: Targeting Financial Institutions in the United States, United Kingdom, and Canada
Nitrogen, a ransomware variant, has surfaced as a significant threat to organizations globally, targeting critical sectors and leveraging sophisticated tactics to breach defenses. This malware operates by encrypting files…

Key Insights from the 2025 State of Penetration Testing Report: An In-Depth Analysis of the Current Landscape
In the recent State of Pentesting Report 2025, Pentera engaged 500 Chief Information Security Officers (CISOs) from global enterprises, including 200 from the United States, to analyze their strategies,…

Microsoft Announces Enhanced “Advanced” Settings for Windows 11
At the recent Build 2025 developer conference, Microsoft introduced the ‘Advanced Settings’ feature aimed at enhancing user customization within Windows 11. This new functionality is designed to empower both…

Growing Cyber Risks Associated with Generative AI Drive Investment in AI Security Solutions
Around 73% of organizations are now investing in AI-specific security tools due to escalating concerns regarding the cyber risks associated with Generative AI (GenAI), as reported in the latest…

Compromised RVTools Installer Distributing Bumblebee Malware
Recent findings have revealed that the RVTools installer available on its official website has been compromised, leading to the distribution of malware. Investigations indicate that this malicious software is…

Cyber Attack Targets Major Supplier for UK Supermarkets Aldi, Tesco, and Sainsbury’s, Leading to Ransom Demand
Owen Scott reports that Peter Green Chilled, a logistics provider serving various supermarkets in the UK, has experienced a significant cyberattack resulting in a ransom demand. In response to…

Malware-Infected Printer Exposes Additional Risks for Windows Users
You would expect that a significant investment of $6,000 in a printer would ensure a secure user experience, devoid of viruses and other malware. Unfortunately, the reality surrounding Procolored…

South Asian Ministries Targeted by SideWinder APT Exploiting Legacy Office Vulnerabilities and Tailored Malware Solutions
High-level government institutions in Sri Lanka, Bangladesh, and Pakistan are currently the target of a sophisticated cyber campaign orchestrated by the threat actor known as SideWinder.

According to researchers…

Microsoft Announces Open-Source Initiative for Windows Subsystem for Linux at Build 2025
Microsoft has made a significant advancement by open-sourcing the Windows Subsystem for Linux (WSL), now available on GitHub, with a few exceptions for specific components integral to Windows.

This…

LockBit Leak Reveals Affiliate Pressure Tactics and Infrequent Compensation
Weeks following the LockBit ransomware incident, the disclosure of compromised data has shed light on the operational mechanisms utilized by affiliates involved in the ransomware ecosystem. This analysis highlights…

UK: Post Office to Provide Compensation for Hundreds Affected by Data Breach
The Post Office has reached a settlement to compensate numerous former subpostmasters whose personal information was unintentionally disclosed during a data breach that occurred last year. In June, the…

Discovery of AWS Default IAM Roles Facilitating Lateral Movement and Cross-Service Exploitation
Cybersecurity researchers have uncovered significant vulnerabilities within the default identity and access management (IAM) roles associated with Amazon Web Services (AWS), which could enable attackers to escalate privileges, manipulate…

Russian APT Groups Escalate Attacks in Europe Utilizing Zero-Day Exploits
The end of 2024 and the onset of 2025 witnessed a notable escalation in malicious cyber activities conducted by Russian-aligned hacking groups, as reported by ESET.

In its APT…

Acquisition of Genetic Data from 23andMe by Pharmaceutical Organization
The recent acquisition of the bankrupt genetic testing company 23andMe by Regeneron Pharmaceuticals for $256 million raises significant questions about the motivations and implications of this transaction. Regeneron, a…

Exposing Over 100 Malicious Chrome Extensions Engaged in Session Hijacking, Credential Theft, and Ad Injection
An unidentified threat actor has been implicated in the development of various malicious Chrome Browser extensions since February 2024. These extensions, which masquerade as benign utilities, are designed to…