Successful exploitation of the flaw requires an attacker to be already authenticated to the web management interface to access the firmware-upload functionality. CERT/CC said the firmware-upload handler enters an "abnormal error state" when certain ... ... Learn 5 key risks to cloud security such as cloud credential theft, lateral movements, AI services, and more. ... Source: Securonix Cybersecurity researchers have disclosed details of a new campaign dubbed PHALT#BLYX that has leveraged ClickFix -style lures to display fixes for fake blue screen of death ( BSoD ) errors in attacks targeting the European hospitality sector.

The Russian ambassador is summoned over a cyber-attack on air traffic control and attempted electoral interference.

April 14, 2022 - The worm exposed Trust Wallet’s Developer GitHub secrets, allowing attackers to publish a backdoor extension and steal funds from 2,520 wallets. ... The agreement strengthens technical and commercial ties as Palo Alto migrates workloads and adopts Google’s Vertex AI and Gemini models. ... Dozens of vulnerabilities have been patched by the industrial giants across their products. ... Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights.

A sophisticated malware campaign, attributed to Russian cybercriminals, is targeting the European hospitality industry. The attack uses a fake "Blue Screen of Death" to deceive victims into downloading the DCRat malware.

India's Tata Motors Passenger Vehicles said on Monday that third-quarter wholesale and retail volumes of its Jaguar Land Rover carmaker declined 43.3% and 25.1%, respectively, compared to year-ago figures, weighed down by production stoppages ...

Anthropic has since banned the relevant accounts and enforced defensive mechanisms to flag such attacks. The campaign, GTG-1002, marks the first time a threat actor has leveraged AI to conduct a "large-scale cyber attack" without major human ...

Venezuelan Oil Company Downplays Alleged US Cyberattack · Dec 16, 2025 · | 3 Min Read · byJai Vijayan, Contributing Writer · Vulnerabilities & Threats · Apple Patches More Zero-Days Used in 'Sophisticated' Attack · Apple Patches More Zero-Days Used in 'Sophisticated' Attack · Dec 15, 2025 · | 3 Min Read · byAlexander Culafi, Senior News Writer ·

Although cyber threats across critical infrastructure sectors are increasing, this advisory does not intend to indicate greater targeting of the WWS Sector versus others. ... CISA, FBI, and NSA published a joint advisory on Conti ransomware with technical details, adversary behavior mapped to MITRE ATT&CK and recommended mitigations. CISA and the FBI have observed the increased use of Conti ransomware in more than 400 attacks on U.S.

The National Security Bureau in Taiwan says that China's attacks on the country's energy sector increased tenfold in 2025 compared to the previous year. ... Microsoft announced today that it has canceled plans to impose a daily limit of 2,000 ...

A DDoS attack temporarily blocks access to a website but does not cause permanent destruction. The Russian “hacktivist” group called the People’s Cyber Army engaged 7.25 million bots in August 2022 in a bot attack to take the Energoatom ...

Manitoba's auditor general says a rural municipality failed to properly investigate a cyber attack that resulted in the loss of hundreds of thousands of dollars.

Web security vulnerabilities Network security vulnerabilities Cloud security Zero-day news Supply chain attacks View all web security news ... From DDoS assaults to cybersecurity exploits that result in a data breach, cyber-attacks present a growing threat to businesses, governments, and individuals.

Interpol said law enforcement across 19 countries made 574 arrests and recovered $3 million, against a backdrop of spiraling cybercrime in the region, including business email compromise, digital extortion, and ransomware schemes.

The AI-based firm intercepted a state-linked operation that was abusing resources as part of a criminal cyber-fraud network. By David Jones • Nov. 21, 2025 ... Researchers warn that ShinyHunters has been compromising OAuth tokens to gain potential access to customer data. By David Jones • Updated Nov. 21, 2025 ... Authorities say the company helped ransomware gangs and supported DDoS attacks.

Manufacturing has been the most-attacked sector for four years straight, according to a recent IBM report. ... R. Eskalis/NIST. Retrieved from NIST. Experts said the new partnership should focus on making AI-based systems more reliable. ... The company said the threat activity is part of a larger campaign against edge devices and internet-exposed infrastructure. Updated Dec. 23, 2025 ... The combination yields a major player in cyber-physical security and exposure management.

A recent report suggested that JLR has lost track of 40,000 new cars while dealing with cybersecurity issues. India has emerged as the most-targeted nation for malware attacks, topping global charts, with Artificial Intelligence fuelling a surge ...

French prosecutors say a pro-Russian hacking group has claimed responsibility for a major cyberattack on France’s national postal service · The four are not believed to be in the United States, the department noted

Malvertising has become such a prevalent threat that hackers are now suggesting cyber insurance companies should mandate adblockers. The provocative idea was raised at the 39th Chaos Communication Congress in Germany.

Hamilton taxpayers are looking at fronting the full cost of a devasting 2024 cyberattack after the city’s insurance company denied its claim.

Government networks have seen a nearly sevenfold surge in cyber attack attempts following Operation Sindoor, highlighting vulnerabilities in ministries and data centers. This escalation necessitates advanced defenses against ransomware and phishing.