Eduard Kovacs

After governments announced sanctions against the Zservers/XHost bulletproof hosting service, Dutch police took 127 servers offline.

ClearSky Cyber Security says it has seen a new Windows zero-day being exploited by a Chinese APT named Mustang Panda. 

Attempts to exploit CVE-2024-0108, an authentication bypass vulnerability in Palo Alto firewalls, started one day after disclosure. 

The Sarcoma ransomware group is threatening to leak data stolen from Taiwanese printed circuit board manufacturer Unimicron.

An analysis conducted by SecurityWeek shows that 405 cybersecurity-related mergers and acquisitions were announced in 2024.

Palo Alto Networks has published 10 new security advisories, including one for a high-severity firewall authentication bypass vulnerability.

Security and compliance automation firm Drata has acquired trust center platform SafeBase in a quarter billion dollar deal.

Chipmakers Intel, AMD and Nvidia on Tuesday published new security advisories to inform customers about vulnerabilities found in their products. 

Industrial giants Schneider Electric and Siemens have released February 2025 Patch Tuesday ICS security advisories.

OpenSSL has patched CVE-2024-12797, a high-severity vulnerability found by Apple that can allow man-in-the-middle attacks.

Dozens of local newspapers owned by media company Lee Enterprises experienced disruptions as a result of a cyberattack. 

A hacker recently offered to sell 20 million OpenAI credentials, but the data likely comes from information stealers, not the AI firm’s systems.

A critical vulnerability found in Orthanc servers can pose a serious risk to medical data and healthcare operations.

SolarWinds will become a privately held company following its acquisition by Turn/River Capital for $4.4 billion in cash. 

An analysis by Chainalysis shows that ransomware payments dropped to $813 million in 2024, from $1.25 billion in 2023. 

Trimble Cityworks is affected by a zero-day vulnerability that has been exploited in attacks involving the delivery of malware.

Spanish authorities have arrested an individual who allegedly hacked several high-profile organizations, including NATO and the US army.

Researchers see dozens of fake DeepSeek websites used for credential phishing, cryptocurrency theft, and scams.

7AI has launched an agentic security platform, which uses AI agents to handle repetitive tasks.

A significant number of cybersecurity-related merger and acquisition (M&A) deals announced in January 2025.