Data Breaches
Salesforce says the extortion attempts are related to past or unsubstantiated incidents, and not to fresh intrusions.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Data Breaches
Oracle has informed customers that it has patched a critical remote code execution vulnerability tracked as CVE-2025-61882.
Data Breaches
The software giant’s investigation showed that vulnerabilities patched in July 2025 may be involved.
Data Breaches
Hackers claim to have stolen 28,000 private repositories, including data associated with major companies that use Red Hat services.
Vulnerabilities
Impacting VMware Aria Operations and VMware Tools, the flaw can be exploited to elevate privileges on the VM.
CISO Conversations
Flynn has been DeepMind’s VP of security since May 2024. Before then he had been a CISO with Amazon, CISO at Uber, and director...
Cybercrime
The incident has resulted in a system failure that impacted orders and shipments in Japan, and call center operations.
Government
The CISA is set to expire on September 30, 2025, raising urgent questions about risk, politics, and the future of threat intelligence.
Government
The government has announced a support package, but a cybersecurity expert has raised some concerns.
Data Breaches
Four people were arrested in July on suspicion of their involvement in cyberattacks against Harrods and two other leading British retail chains, Marks &...
Vulnerabilities
Leading to remote code execution and privilege escalation, the flaws were exploited on Cisco ASA 5500-X series devices that lack secure boot.
Nation-State
Google’s Threat Intelligence Group and Mandiant link the BrickStorm campaign to UNC5221, warning that hackers are analyzing stolen code to weaponize zero-day vulnerabilities.
Network Security
The security defect allows remote attackers with administrative privileges to execute arbitrary code as the root user.
Ransomware
Cybersecurity researchers believe the attack on Collins Aerospace involved a piece of ransomware known as HardBit.
Network Security
The attack was aimed at a European network infrastructure company and it has been linked to the Aisuru botnet.
Mobile & Wireless
More than 300 servers and 100,000 SIM cards designed to mimic cellphones and overwhelm networks.
Vulnerabilities
CVE-2025-26399 is a patch bypass of CVE-2024-28988, which is a patch bypass of the exploited CVE-2024-28986.
Data Breaches
The company says customer contact information was stolen from a third-party service provider’s platform.
Ransomware
Collins Aerospace is reportedly having difficulties recovering from the ransomware attack.
Malware & Threats
Threat actors rely on malicious GitHub repositories to infect LastPass’s macOS users with the Atomic infostealer.
Artificial Intelligence
A cybersecurity advisory with technical details and recommendations has been written by the NSA, CISA and other agencies.
Artificial Intelligence
Vulnerabilities
Cybersecurity Funding
Vulnerabilities
