Category: Cyber Security
-
A new Zimbra zero-day exploit has been used in targeted attacks worldwide. Hackers deployed malicious iCalendar files to inject JavaScript, steal credentials, and access victims’ emails. The flaw allowed remote code execution inside active webmail sessions, giving attackers full control over compromised accounts. How the Zimbra Zero-Day Exploit Worked Researchers identified the vulnerability as CVE-2025-27915,…
-
Cybersecurity researchers have detected a sharp rise in Palo Alto Networks scans aimed at identifying vulnerable login portals. The spike suggests that attackers may be preparing for larger exploitation campaigns targeting GlobalProtect VPN and PAN-OS devices. Massive Increase in Scanning Activity According to data from GreyNoise, the number of IPs scanning Palo Alto Networks portals…
-
Signal quantum encryption has arrived. The privacy-focused messaging app introduced a new layer of protection called Sparse Post-Quantum Ratchet (SPQR) to defend against future quantum computing threats. This upgrade aims to keep Signal messages secure even when quantum computers can break today’s encryption methods. How the New SPQR System Works SPQR strengthens Signal’s existing Double…
-
A recent Renault cyber attack exposed customer data through a breach at a third-party provider. While Renault’s core systems remain secure, personal details such as names, contact information, and vehicle identifiers were compromised. The company has launched an investigation to determine the full extent of the incident. What Happened Renault confirmed that the breach originated…
-
A group of Salesforce hackers is demanding ransom while threatening to leak data from more than 700 companies. The attackers claim they accessed sensitive information through Salesforce-linked tools, putting global businesses at risk. What Happened The syndicate, calling itself Scattered LAPSUS$ Hunters, posted a ransom demand on the dark web. They warned Salesforce to negotiate…
-
The Lynx ransomware attack has struck TriMed, a subsidiary of healthcare giant Henry Schein. Hackers claim to have stolen and leaked sensitive corporate and personal data. The incident raises urgent questions about cybersecurity in healthcare and the growing danger of ransomware-as-a-service groups. What Data Was Stolen The attackers say the breach exposed highly sensitive records.…
-
A Microsoft Defender bug is confusing Dell users by triggering false BIOS update alerts. The flaw stems from faulty logic in Defender’s vulnerability-checking system, which incorrectly flags firmware versions as outdated. Microsoft confirmed the issue and promised a fix. What Happened Microsoft Defender for Endpoint began alerting Dell users that their BIOS required updates. In…
-
The Shamir Medical Center ransomware attack has shaken Israel’s healthcare sector after the Qilin 8T group claimed responsibility. The attackers allege they stole sensitive patient information and internal hospital data, raising alarms about the growing cyber threat to medical institutions. Details of the Breach According to Qilin 8T, the attack led to the exfiltration of…
-
A new 3DCS ransomware attack has drawn attention across the aerospace and manufacturing sectors. The hackers behind the breach claim to have stolen 11GB of data from Dimensional Control Systems (3DCS), a key software provider for Boeing, Siemens, Samsung, and other global corporations. What Hackers Stole The attackers, calling themselves J Group, listed 3DCS on…
-
Google has issued a warning about a new wave of hacker extortion emails targeting company executives. The campaign appears to focus on organizations using Oracle’s E-Business Suite. Security experts believe the notorious Cl0p ransomware group may be behind the scheme. Extortion Campaign Details Hackers are sending executives alarming emails claiming to have breached Oracle’s E-Business…