Ionut Arghire

The US government has issued an alert on the Interlock ransomware, which targets organizations via drive-by download attacks.

Sophos has patched five vulnerabilities in Sophos Firewall that could allow remote attackers to execute arbitrary code.

Fresh security updates for Chrome and Firefox resolve multiple high-severity memory safety vulnerabilities.

Cisco says it is aware of attempted exploitation of critical ISE vulnerabilities leading to unauthenticated remote code execution.

Dell confirms the compromise of a demo environment containing synthetic data after hackers leak allegedly stolen information.

AI-powered cybersecurity company Darktrace has acquired network traffic visibility provider Mira Security.

Dior says hackers accessed personal information in a January 2025 intrusion. No payment information was compromised.

The UK government has sanctioned three Russian APTs and 18 individuals for their involvement in cyber operations against Ukraine, NATO allies, and EU.

Iranian APT MuddyWater has been using new versions of the DCHSpy Android surveillance tool since the beginning of the conflict with Israel.

A surveillance company was caught using an SS7 bypass technique to trick wireless carriers into divulging users’ locations.

The Alcohol & Drug Testing Service (TADTS) says personal information was stolen in a July 2024 ransomware attack.

Hackers are exploiting a zero-day vulnerability in CrushFTP to gain administrative privileges on vulnerable servers via HTTPS.

AI-native email security firm StrongestLayer has emerged from stealth mode with $5.2 million in seed funding.

Dozens of FortiWeb instances have been hacked after PoC targeting a recent critical vulnerability was shared publicly.

The CitrixBleed 2 vulnerability in NetScaler may expose organizations to compromise even if patches have been applied.

Google has filed a lawsuit against the Badbox 2.0 botnet operators, after identifying over 10 million infected Android devices.

Cybersecurity startup Empirical Security has raised $12 million in seed funding for its vulnerability management platform. 

Deployed on mobile devices confiscated by Chinese law enforcement, Massistant can collect user information, files, and location.

Cisco has released patches for multiple vulnerabilities, including a critical flaw in Cisco ISE that leads to remote code execution (RCE).

Oracle’s July 2025 Critical Patch Update contains 309 security patches that address approximately 200 unique CVEs.