Eduard Kovacs

AWS and cybersecurity vendors have made several announcements at the cloud giant’s re:Invent 2025 event. 

The Codex CLI vulnerability tracked as CVE-2025-61260 can be exploited for command execution.

Cryptomixer was targeted by law enforcement in Operation Olympia for facilitating cybercrime and money laundering. 

Albiriox is a banking trojan offered under a malware-as-a-service model for $720 per month.

CISA has added CVE-2021-26829 to its Known Exploited Vulnerabilities (KEV) catalog.

Michael Clapsis has been sentenced to 7 years and 4 months in prison for stealing sensitive information.

Multiple Mixpanel customers were impacted by a recent cyberattack targeting the product analytics company. 

The OnSolve CodeRED platform has been targeted by the Inc Ransom ransomware group, resulting in disruptions and a data breach.

Dartmouth College has disclosed a data breach after cybercriminals leaked over 226 Gb of files stolen from the university.

CISA has described the techniques used by attackers and pointed out that the focus is on high-value individuals.

Palo Alto Networks has conducted an analysis of malicious LLMs that help threat actors with phishing, malware development, and reconnaissance. 

More than 100 alleged victims of the Oracle EBS campaign have been added to the Cl0p ransomware website.

CISA has added CVE-2025-61757 to its Known Exploited Vulnerabilities (KEV) catalog. 

The Cl0p ransomware group has listed Mazda and Mazda USA as victims of the Oracle EBS campaign on its leak website.

More than 1.6 Tb of data allegedly stolen from Cox was made public by the hackers.

CVE-2025-61757 is an unauthenticated remote code execution vulnerability affecting Oracle Identity Manager.

The number of participants in the cyber and physical grid security exercise increased by nearly 50% compared to two years ago.

SquareX claims to have found a way to abuse a hidden Comet API to execute local commands, but Perplexity says the research is fake.

The Android malware is in development and appears to be mainly aimed at users in Europe.

Researchers demonstrated a now-patched vulnerability that could have been used to enumerate all WhatsApp accounts.