Category: Cyber Security
-
Three critical Cisco zero-day vulnerabilities are under active attack, with CISA warning organizations to patch immediately. Security experts link the campaign to the ArcaneDoor espionage group, raising concerns about nation-state involvement. The Three Vulnerabilities Cisco confirmed three flaws in ASA and Firepower devices: Cisco stated no workarounds exist. Only patching can remove the risk. ArcaneDoor…
-
The Rhysida ransomware group has claimed responsibility for an attack on Maryland’s Department of Transportation (MDOT). Hackers posted stolen data on their leak site and are demanding $3.3 million in Bitcoin. The breach highlights the rising cyber risks facing critical infrastructure. How the Attack Unfolded Rhysida targeted systems connected to the Maryland Transit Administration, part…
-
Microsoft has warned that the XCSSET macOS malware is back with a dangerous new variant. The threat specifically targets Xcode developers, using compromised projects to spread malicious payloads. This evolution shows how attackers continue to adapt their methods to infiltrate the Apple ecosystem. How the Malware Works XCSSET first gained attention in 2020 for its…
-
Security researchers uncovered that the Postmark MCP npm package secretly stole user emails. The malicious library posed as an unofficial integration with the email delivery service Postmark. Its hidden code harvested sensitive data, leaving developers and organizations at risk. How the Malicious Package Worked The npm package appeared to provide Mailchain Client Protocol (MCP) support…
-
The Scattered Spider attack has left a major mark on the UK’s Co-operative Group. The April 2025 cyber incident cost the retailer $107 million, disrupted its operations, and compromised the data of 6.5 million members. The company continues to recover while warning of more financial strain ahead. The Financial Impact Co-op reported losses of £80…
-
Two U.S. senators question Match Group about romance scams on its dating apps. The lawmakers want detailed answers on how Tinder, Hinge, and other platforms detect and prevent fraud. Their move highlights rising pressure on the online dating industry to safeguard users. Senators Demand Action Senators Maggie Hassan (D) and Marsha Blackburn (R) sent a…
-
A massive npm supply chain compromise forced CISA and GitHub to take urgent action. A worm named Shai-Hulud spread through developer tools and infected packages, harvesting credentials and replicating itself across the JavaScript ecosystem. This breach shows how fragile open source supply chains can be. The Shai-Hulud Worm Researchers found Shai-Hulud embedded in npm packages.…
-
The BrickStorm espionage campaign has raised alarm in the cybersecurity community. Linked to Chinese threat actors, the operation focuses on law firms and legal technology companies. By stealing case files, contracts, and intellectual property, BrickStorm highlights how vulnerable the legal sector has become. What Is BrickStorm? Security researchers describe BrickStorm as a long-running espionage campaign.…
-
A hacker arrested after a cyberattack on European airports is now facing investigation. Authorities believe the suspect carried out disruptions that targeted critical systems across major travel hubs. This incident highlights the growing risks airports face from cybercrime. The Arrest Law enforcement confirmed the arrest of a hacker tied to a recent wave of attacks.…
-
Supermicro BMC flaws have raised concerns across the security industry. Researchers discovered vulnerabilities in Supermicro’s Baseboard Management Controllers (BMCs) that attackers could exploit to install persistent backdoors. These flaws create long-term risks for organizations relying on Supermicro servers. What Are BMCs? Baseboard Management Controllers are dedicated chips on server motherboards. They allow administrators to monitor…