Eduard Kovacs

CISA has added CVE-2025-61757 to its Known Exploited Vulnerabilities (KEV) catalog. 

The Cl0p ransomware group has listed Mazda and Mazda USA as victims of the Oracle EBS campaign on its leak website.

More than 1.6 Tb of data allegedly stolen from Cox was made public by the hackers.

CVE-2025-61757 is an unauthenticated remote code execution vulnerability affecting Oracle Identity Manager.

The number of participants in the cyber and physical grid security exercise increased by nearly 50% compared to two years ago.

SquareX claims to have found a way to abuse a hidden Comet API to execute local commands, but Perplexity says the research is fake.

The Android malware is in development and appears to be mainly aimed at users in Europe.

Researchers demonstrated a now-patched vulnerability that could have been used to enumerate all WhatsApp accounts.

SolarWinds Serv-U is affected by vulnerabilities that can be exploited for remote code execution.

Amazon threat intelligence experts have documented two cases in which Iran leveraged hacking to prepare for kinetic attacks.

Microsoft said the DDoS attack was aimed at an endpoint in Australia and reached 15.72 Tbps and 3.64 Bpps.

Microsoft announced new security capabilities for Defender, Sentinel, Copilot, Intune, Purview, and Entra. 

Major online services such as ChatGPT, X, and Shopify were disrupted in a global Cloudflare outage on Nov. 18th, as well as transit and...

The total amount of money given to bug bounty hunters by the social media giant has reached $25 million.

The Inc Ransom group has taken credit for the hack, claiming to have stolen several terabytes of data. 

Audricus Phagnasay, Jason Salazar, Alexander Paul Travis, Erick Ntekereze, and Oleksandr Didenko have pleaded guilty.

Logitech was listed on the Cl0p ransomware leak website in early November, but its disclosure does not mention Oracle.

The goal is to produce a cyber force capable of defeating threats posed by major adversaries such as China.

The media company admitted that cybercriminals attempted to extort a payment after stealing personal information. 

A vulnerability in ImunifyAV can be exploited for arbitrary code execution by uploading a malicious file to shared servers.