SecurityWeek

In December, the botnet’s operators focused on weaponizing the flaw to compromise vulnerable Next.js servers.

The Qilin ransomware group hacked the healthcare organization and stole data from its systems in May 2025. 

GreyNoise has observed thousands of requests targeting a dozen vulnerabilities in Adobe ColdFusion during the Christmas 2025 holiday.

The worm exposed Trust Wallet’s Developer GitHub secrets, allowing attackers to publish a backdoor extension and steal funds from 2,520 wallets.

The European Space Agency is conducting an investigation and says external science servers have been compromised.

The total disclosed value for all the cybersecurity M&A deals announced in 2025 exceeded $84 billion.

The threat actor uses a signed driver file containing two user-mode shellcodes to execute its ToneShell backdoor.

Roughly 30,000 Korean Air employees had their data stolen by hackers in a breach at former subsidiary KC&D.

It took Sax well over a year to complete its investigation after detecting hackers on its network.

Tracked as CVE-2020-12812, the exploited FortiOS flaw allows threat actors to bypass two-factor authentication.

The ecommerce giant will provide purchase vouchers to the 33.7 million individuals impacted by the incident.

Hackers stole names, addresses, Social Security numbers, ID numbers, and medical and health insurance information from Aflac’s systems.

The ‘download’ button on the official EmEditor website served a malicious installer.

Dubbed MongoBleed, the high-severity flaw allows unauthenticated, remote attackers to leak sensitive information from MongoDB servers.

A hacker named Lovely made public 2.3 million records representing Wired subscriber information.

Central computer systems at French national postal service La Poste were knocked offline Monday in DDoS attack.

Rumors of a possible buyout surfaced earlier this month, with the official announcement coming just weeks after Armis announced raising $435 million.

The personal information of 21,000 customers was stolen after hackers compromised Red Hat’s GitLab instances.

The cybercriminals attempted to steal $28 million from compromised bank accounts through phishing.

The package provides legitimate functionality to evade detection, while stealing users’ data and deploying a backdoor.