Ionut Arghire

Australia mirrored the US’s recent sanctions against bankers, financial institutions, and others allegedly involved in laundering funds for North Korea.

The vulnerability is tracked as CVE-2025-12058 and it can be exploited for arbitrary file loading and conducting SSRF attacks.

An out-of-bounds write flaw in WebGPU tracked as CVE-2025-12725 could be exploited for remote code execution.

Multiple state-sponsored Russian groups are targeting Ukrainian entities and European countries linked to Ukraine.

Between 2016 and 2021, the suspects defrauded 4.3 million cardholders in 193 countries of €300 million (~$346 million).

The investment will fuel the development of Truffle’s enterprise-grade secrets detection, verification, and remediation platform.

Hackers drained more cryptocurrency from Balancer by exploiting a rounding function and performing batch swaps.

The flaws allow attackers to execute arbitrary code remotely and elevate their privileges to root on an affected system.

The threat actor stole the firewall configuration files of all SonicWall customers who used the cloud backup service.

The company plans to advance its identity exposure management capabilities and pursue M&A opportunities.

Leveraging AI, ConductorOne’s platform secures and manages millions of human, non-human, and AI identities.

The critical vulnerability allows attackers to read arbitrary emails, including password reset messages.

The funding will fuel the development of Daylight’s security operations platform and the launch of new protection modules.

The gen-AI adoption management platform will invest the funds in accelerating growth and product innovations.

Threat actors engage in elaborate attack chains to infect trucking and logistics companies with remote access tools.

A component of the newly discovered SesameOp backdoor uses the API to store and relay commands from the C&C server.

Apple has released iOS 26.1 and macOS Tahoe 26.1 with patches for over 100 vulnerabilities, including critical flaws.

The November 2025 Android patches resolve two vulnerabilities, both in the platform’s System component.

Yuriy Igorevich Rybtsov, aka MrICQ, was arrested in Italy and lost his appeal to avoid extradition to the US.

An attacker can inject indirect prompts to trick the model into harvesting user data and sending it to the attacker’s account.