information security news

A hacker tied to Yemen Cyber Army gets 20 months in prison

UK hacker Al-Tahery Al-Mashriky, tied to Yemen Cyber Army, gets 20 months in prison for website defacements and stolen data…

4 months ago

Exploit weaponizes SAP NetWeaver bugs for full system compromise

Exploit chaining CVE-2025-31324 & CVE-2025-42999 in SAP NetWeaver enables auth bypass and RCE, risking compromise and data theft. A new…

4 months ago

Noodlophile Stealer evolution

Noodlophile malware spreads via copyright phishing, targeting firms in the U.S., Europe, Baltics & APAC with tailored spear-phishing lures. The…

4 months ago

Allianz Life security breach impacted 1.1 million customers

Allianz Life breach exposed data of most of its 1.4M customers; HIBP lists 1.1M impacted, though the insurer hasn’t confirmed…

4 months ago

Analyzing evolution of the PipeMagic malware<gwmw style="display:none;"></gwmw>

Hackers exploited Windows flaw CVE-2025-29824 to deploy PipeMagic malware in RansomExx attacks, Kaspersky revealed. A joint report from Kaspersky and BI.ZONE analyzed the evolution…

4 months ago

U.S. CISA adds Trend Micro Apex One flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Trend Micro Apex One flaw to its Known Exploited Vulnerabilities catalog. The U.S.…

4 months ago

AI for Cybersecurity: Building Trust in Your Workflows

In cybersecurity, speed matters, but trust is crucial. AI must ensure both rapid response and reliable decisions to avoid errors…

4 months ago

Human resources firm Workday disclosed a data breach

Human resources firm Workday disclosed a data breach after attackers accessed a third-party CRM platform via social engineering. Workday is…

4 months ago

DoJ seizes $2.8M linked to Zeppelin Ransomware

DoJ seized $2.8M in crypto from Ianis Antropenko, indicted in Texas and tied to the defunct Zeppelin ransomware. The U.S.…

4 months ago

<gwmw style="display: none; background-color: transparent;"></gwmw>Xerox fixed path traversal and XXE bugs in FreeFlow Core<gwmw style="display: none; background-color: transparent;"></gwmw>

Xerox patched two serious flaws in FreeFlow Core, path traversal and XXE injection, that allowed unauthenticated remote code execution. Xerox…

4 months ago

This website uses cookies.