Eduard Kovacs

Noteworthy stories that might have slipped under the radar: Krispy Kreme data breach costs $11M, Pwn2Own moves to Berlin, the story of the 2024...

The Qilin ransomware gang claims to have stolen 350 Gb of files from Lee Enterprises in the attack that caused newspaper disruptions.

The Vo1d botnet is now powered by 1.6 million Android TV devices, up from 1.3 million half a year ago. 

In a lawsuit targeting cybercriminals who abuse AI services, Microsoft has named individuals from Iran, the UK, China and Vietnam.

CrowdStrike has published its 2025 Global
Threat Report, which warns of faster breakout time and an increase in Chinese activity. 

A Singaporean man accused of being a hacker responsible for over 90 data leaks has been arrested in Thailand. 

XSS vulnerability allowed a threat actor to redirect users to arbitrary domains.

Cisco has patched command injection and DoS vulnerabilities affecting some of its Nexus switches, including a high-severity flaw.

The FBI has attributed the Bybit hack to a North Korean group named TraderTraitor as more technical details of the attack have come to...

New Linux malware named Auto-Color, which allows full remote access to compromised devices, targets North America and Asia.

The Open Source Security Foundation (OpenSSF) has created a structured set of security requirements for open source projects.

Qualcomm says it’s working with Google to ensure that Android device manufacturers will be able to provide security updates for 8 years.

Background and drug screening giant DISA has revealed that a 2024 data breach impacts more than 3.3 million people.

A China-linked botnet powered by 130,000 hacked devices has targeted Microsoft 365 accounts with password spraying attacks.

The EU has announced new sanctions against entities aiding Russia’s war against Ukraine, including an individual who leads North Korean hackers.

Dragos has published its 2025 OT/ICS Cybersecurity Report, which provides information on the threats and trends observed in 2024. 

CISA has added CVE-2024-20953, an Oracle Agile PLM vulnerability patched in January 2024, to its KEV catalog. 

Rad Security has raised $14 million in Series A funding for a defense platform for AI workloads and cloud infrastructure.

OpenAI has banned ChatGPT accounts used by Chinese threat actors, including ones leveraged for the development of spying tools.

Australian government entities have been banned from using products and services of Russian cybersecurity company Kaspersky.