Ionut Arghire

One of the two 17-year-old boys allegedly walked by law enforcement and embassy offices carrying a Wi-Fi sniffer.

In one attack, the hackers leveraged the Datto RMM utility on a domain controller and various other legitimate tools to evade detection.

North Korean threat actors pose as recruiters to steal developers’ identities and supply them to fraudulent IT workers.

The malware now uses a four-stage infection chain, has an additional persistence mechanism, and also targets Firefox browser data.

Eight days before patches, a threat actor exploited CVE-2025-10035 as a zero-day to create a backdoor admin account.

Leading to remote code execution and privilege escalation, the flaws were exploited on Cisco ASA 5500-X series devices that lack secure boot.

Threat actors impersonating PyPI ask users to verify their email for security purposes, directing them to fake websites.

RedNovember has been targeting government, defense and aerospace, and legal services organizations worldwide.

The Miljödata data breach has impacted numerous organizations, education institutions, and Swedish municipalities.

The security defect allows remote attackers with administrative privileges to execute arbitrary code as the root user.

The hackers remained undetected for three weeks, deploying China Chopper, remote access scripts, and reconnaissance tools.

GitHub will implement local publishing with mandatory 2FA, granular tokens that expire after seven days, and trusted publishing.

The software update includes additional file checks and helps users remove the known rootkit deployed in a recent campaign.

Tracked as CVE-2025-59689, the command injection bug could be triggered via malicious emails containing crafted compressed attachments.

CVE-2025-26399 is a patch bypass of CVE-2024-28988, which is a patch bypass of the exploited CVE-2024-28986.

The company will expand its platform’s capabilities and accelerate investigative collaboration and go-to-market efforts.

The botnet’s operators provide customers with access to an infected network of Docker containers so they can conduct DDoS attacks.

The juvenile suspect surrendered on September 17 and was booked on computer intrusion, extortion, and identity theft charges.

The company says customer contact information was stolen from a third-party service provider’s platform.

L1TF Reloaded is a vulnerability combining the old L1TF and half-Spectre hardware flaws to bypass deployed software mitigations.