Tag: cyber
-
Windows Says Goodbye to Blue Screen of Death, Introduces Black Screen
After nearly four decades as a symbol of frustration and failure for PC users worldwide, Microsoft is officially retiring the iconic Blue Screen of Death (BSOD) in favor of a new, sleeker Black Screen of Death. The change, set to roll out later this summer with Windows 11 version 24H2, marks the most significant visual…
-
Mitsubishi Electric AC Flaw Lets Hackers Remotely Control Systems
A critical security vulnerability has been discovered in multiple Mitsubishi Electric air conditioning systems, potentially allowing hackers to bypass authentication and remotely control affected units. The flaw, identified as CVE-2025-3699, was disclosed by Mitsubishi Electric on June 26, 2025, and has been assigned a maximum CVSS base score of 9.8, indicating its severity. Authentication Bypass…
-
University Student Charged for Alleged Hacking and Data Theft
A 27-year-old former student of Western Sydney University has been charged with a string of cyber offences, following an extensive investigation into a series of cyber attacks that have plagued the institution since 2021. The arrest comes after a coordinated operation by the NSW Police Cybercrime Squad under Strike Force Docker, working in partnership with…
-
‘Cyber Fattah’ Hacktivist Group Leaks Saudi Games Data
As tensions in the Middle East rise, hacktivist groups are coming out of the woodwork with their own agendas, leading to notable shifts in the hacktivist threat landscape. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/cyber-fattah-hacktivist-leaks-saudi-games-data
-
Pre-Auth Flaw in MongoDB Server Allows Attackers to Cause DoS
A critical pre-authentication vulnerability (CVE-2025-6709) in MongoDB Server enables unauthenticated attackers to trigger denial-of-service (DoS) conditions by exploiting improper input validation in OIDC authentication. The flaw allows malicious actors to crash database servers by sending specially crafted JSON payloads containing specific date values, causing invariant failures and server crashes. This vulnerability affects MongoDB Server versions…
-
Open VSX Marketplace Flaw Enables Millions of Developers at Risk of Supply Chain Attacks
Tags: attack, control, cyber, cybersecurity, flaw, marketplace, open-source, risk, supply-chain, vulnerabilityA newly disclosed critical vulnerability in the Open VSX Registry, the open-source marketplace for Visual Studio Code (VS Code) extensions, has put millions of developers worldwide at risk of devastating supply chain attacks. The flaw, discovered by cybersecurity researchers at Koi Security, could have allowed attackers to seize control of the entire extensions marketplace, enabling…
-
Is Your Secrets Management Getting Better?
Are Your Cybersecurity Strategies Evolving Effectively? The question arises: Is your secrets management improving? These days, robust secrets management isn’t a luxury but a necessity, especially for businesses dealing with cloud technology. Transforming your cyber strategies to effectively manage Non-Human Identities (NHIs) and secrets holds the key to minimizing risks and boosting security across various……
-
NSA’s Patrick Ware takes over as top civilian at U.S. Cyber Command
Tags: cyberThe new executive director of U.S. Cyber Command, the No. 3 position at the digital warfighting organization, is NSA veteran Patrick Ware. First seen on therecord.media Jump to article: therecord.media/patrick-ware-executive-director-us-cyber-command
-
Safe, Axio, KPMG Dominate Cyber Risk Quantification Rankings
KPMG Climbs, ThreatConnect Falls in Latest Cyber Risk Quantification Forrester Wave. Safe Security and Axio remained atop Forrester’s cyber risk quantification rankings, with KPMB climbing onto the leaderboard and ThreatConnect falling off the leaderboard. Cyber risk quantification tools have moved beyond basic risk modeling to automate recommendations and analyze trends. First seen on govinfosecurity.com Jump…
-
Microsegmentation: The Must-Have Cyber Defense in 2025
The Perimeter Is Gone But Your”¯Attack Surface Keeps Growing Cloud workloads, SaaS apps, edge devices, third-party APIs, and a permanently remote workforce have dissolved the neat network perimeter we once relied on. Traditional firewalls, VPNs, and even best-in-class EDR only cover pieces of the puzzle. Once attackers get any foothold, they can ride flat,… First…
-
Experts: Cyber, physical security of US critical infrastructure jeopardized by federal government revamp
First seen on scworld.com Jump to article: www.scworld.com/brief/experts-cyber-physical-security-of-us-critical-infrastructure-jeopardized-by-federal-government-revamp
-
Stellar Cyber Expands Features in Coverage Analyzer for MSSPs, CISOs
First seen on scworld.com Jump to article: www.scworld.com/news/stellar-cyber-expands-features-in-coverage-analyzer-for-mssps-cisos
-
Draugnet launches for anonymous cyber threat tharing
First seen on scworld.com Jump to article: www.scworld.com/brief/draugnet-launches-for-anonymous-cyber-threat-tharing
-
First-ever cyber insurance premium decline recorded last year
First seen on scworld.com Jump to article: www.scworld.com/brief/first-ever-cyber-insurance-premium-decline-recorded-last-year
-
US vigilance on Chinese threats crucial amid potential Iranian hacks, FBI cyber head says
First seen on scworld.com Jump to article: www.scworld.com/brief/us-vigilance-on-chinese-threats-crucial-amid-potential-iranian-hacks-fbi-cyber-head-says
-
Code or be conquered: Preparing developers for cyber threats in the age of AI
First seen on scworld.com Jump to article: www.scworld.com/resource/code-or-be-conquered-preparing-developers-for-cyber-threats-in-the-age-of-ai
-
Cyber lessons from the recent escalation of tensions in the Middle East
First seen on scworld.com Jump to article: www.scworld.com/perspective/cyber-lessons-from-the-recent-escalation-of-tensions-in-the-middle-east
-
Iranian APT35 Hackers Targeting High-Profile Cybersecurity Experts and Professors in Israel
The Iranian threat group Educated Manticore, also tracked as APT35, APT42, Charming Kitten, or Mint Sandstorm, has intensified its cyber-espionage operations targeting Israeli cybersecurity experts, computer science professors, and journalists. Associated with the Islamic Revolutionary Guard Corps’ Intelligence Organization (IRGC-IO), this advanced persistent threat (APT) group has been under scrutiny by Check Point Research for…
-
IBM WebSphere Application Server Flaw Enables Arbitrary Code Execution
A severe security flaw has been identified in IBM WebSphere Application Server, potentially allowing remote attackers to execute arbitrary code on affected systems. Tracked under CVE-2025-36038, this vulnerability stems from a deserialization of untrusted data issue, classified under CWE-502. IBM has assigned a critical CVSS Base Score of 9 to this flaw, with a vector…
-
How Virtual CISO Enhancements Will Help MSPs Grow Operations
Why Cynomi’s Embrace of AI-Driven Security Tools Will Drive MSP and MSSP Efficiency. Cynomi’s recent Series B funding round will deepen AI features, expand its Solution Showcase and enable managed service providers to deliver cybersecurity at scale. CEO David Primor says the company is building the operating system for MSP and MSSP cyber operations. First…
-
nOAuth Exploit Enables Full Account Takeover of Entra Cross-Tenant SaaS Applications
A severe security flaw, dubbed nOAuth, has been identified in certain software-as-a-service (SaaS) applications integrated with Microsoft Entra ID, potentially allowing attackers to achieve full account takeover across tenant boundaries. Research conducted by Semperis, disclosed on June 26, 2025, revealed that 9 out of 104 tested applications approximately 9% within the Microsoft Entra App Gallery…
-
Researchers Weaponize and Obfuscate .NET Assemblies Using MacroPack
Researchers at BallisKit have introduced a sophisticated scenario within their MacroPack Pro tool to obfuscate and weaponize .NET assemblies, significantly enhancing their stealth against modern security solutions. As .NET has become a preferred language for crafting prominent offensive tools like Rubeus, SeatBelt, SharpDPAPI, and Certify over recent years, its widespread use has also drawn the…
-
British hacker IntelBroker faces years in a US prison cell
US authorities have unsealed charges against 25-year-old hacker Kai West, aka IntelBroker, accusing him of being behind multiple cyber attacks First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366626655/British-hacker-IntelBroker-faces-years-in-a-US-prison-cell
-
Australia’s 28-Day Cyber Comeback
Australian and New Zealand companies are bouncing back from cyberattacks nearly three weeks faster than they did a year ago, according to a new survey commissioned by U.S. data-protection vendor Commvault and published by Reuters. The poll of 408 IT leaders found the typical recovery window has shrunk to 28 days, down from 45 days……
-
The Hacktivist Cyber Attacks in the Iran-Israel Conflict
Overview of the current cyber attacks in the Iran-Israel conflict The geopolitical confrontation between Iran and Israel has a long history. In recent years, as the competition between the two countries in the military, nuclear energy and diplomatic fields has been escalating. On June 13, 2025, the IDF launched a large-scale military operation against Iran….The…
-
Gogs Remote Command Execution Vulnerability (CVE-2024-56731)
Overview Recently, NSFOCUS CERT detected that Gogs issued a security bulletin and fixed the Gogs remote command execution vulnerability (CVE-2024-56731); Due to the incomplete CVE-2024-39931 fix, an authenticated attacker can delete files in the .git directory through symbolic links and execute arbitrary commands on the Gogs instance using the account permissions specified by RUN_USER in…The…
-
Glasgow Council services remain offline a week after cyber attack
Disruption continues a week after core services at Glasgow City Council were forced offline following a cyber attack on a third-party IT services provider First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366626754/Glasgow-Council-services-remain-offline-a-week-after-cyber-attack
-
Threat Actors Exploit ChatGPT, Cisco AnyConnect, Google Meet, and Teams in Attacks on SMBs
Threat actors are increasingly leveraging the trusted names of popular software and services like ChatGPT, Cisco AnyConnect, Google Meet, and Microsoft Teams to orchestrate sophisticated cyberattacks. According to a recent report by Kaspersky Lab, SMBs, often perceived as less fortified than larger enterprises, are prime targets for both opportunistic hackers and organized cybercrime groups. Rising…
-
How Geopolitical Tensions Are Shaping Cyber Warfare
In today’s cyber battlefield, resilience starts with readiness, and the cost of falling short increases by the day. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/geopolitical-tensions-shape-cyber-warfare