Category: Cyber Security
-
The FBI warns the public about fake FBI complaint portals impersonating its Internet Crime Complaint Center (IC3). Cybercriminals use these fraudulent websites to steal personal and financial information from victims. The rise of these portals highlights the growing creativity of scammers. How the Fake Portals Work Attackers design websites that look almost identical to the…
-
CISA has revealed that attackers deployed Ivanti EPMM malware kits exploiting recently patched vulnerabilities. The flaws, CVE-2025-4427 and CVE-2025-4428, allow authentication bypass and code injection. Threat actors have leveraged them since May, exploiting systems whose APIs remained vulnerable. What the vulnerabilities are The two vulnerabilities affect Ivanti Endpoint Manager Mobile (EPMM) in versions 11.12.0.4, 12.3.0.1,…
-
Fortra has issued a warning about a max severity flaw in its GoAnywhere MFT License Servlet. The vulnerability allows remote command injection via a forged license response. It poses a serious risk to organizations that leave their Admin Console publicly accessible. What the Flaw Is The vulnerability, tracked as CVE-2025-10035, stems from deserialization of untrusted…
-
A cyberattack has disrupted Collins Aerospace’s MUSE system, halting check-in and boarding operations at several major European airports. The incident, which began on September 19, 2025, caused widespread delays and cancellations. Affected hubs include London Heathrow, Berlin Brandenburg, Brussels Airport, and others. What Happened The MUSE platform, a core system used for passenger check-in, baggage…
-
The ransomware group WarLock has escalated its activities sharply, claiming over 60 victims in September 2025. Also known as Gold Salem or Storm-2603, the group has targeted major enterprises, telecoms, and government agencies worldwide. The WarLock ransomware attacks surge highlights how quickly a new group can rise in prominence. Who Is WarLock? First observed in…
-
The alleged SK Telecom source code leak has raised serious security concerns. Hackers claim to have accessed the company’s internal files, exposing project repositories, build configurations, and AWS keys. While no customer data has been confirmed in the leak, experts warn that exposed source code can open the door to future vulnerabilities and intellectual property…
-
Authorities have confirmed TfL cyberattack arrests, charging two teenagers linked to the Scattered Spider hacking group. The suspects allegedly breached Transport for London (TfL) systems in 2024, compromising customer records and raising new concerns about cyberattacks on public infrastructure. Who Was Arrested Police named Thalha Jubair, 19, from East London, and Owen Flowers, 18, from…
-
Researchers have uncovered iOS malicious deepfakes that target jailbroken iPhones. The technique hijacks live video feeds and replaces them with AI-generated footage. This method poses serious risks for Apple users and banks, enabling identity theft and large-scale fraud. How iOS Malicious Deepfakes Work The attack requires a jailbroken iPhone running iOS 15 or later. Jailbreaking…
-
SystemBC proxy malware is infecting virtual private servers (VPS) worldwide. The malware transforms compromised systems into large proxy networks that cybercriminals use to conceal their operations. With stability, scale, and simple infection methods, it poses a growing threat to global security. How SystemBC Proxy Malware Works SystemBC first appeared in 2019 and quickly became popular…
-
BMW ransomware attack by Everest has raised serious concerns in the automotive sector. The group claims it stole sensitive audit files and is now pressuring the luxury automaker with strict deadlines. The incident underscores how high-profile manufacturers are becoming prime ransomware targets. What Everest claims to have stolen Everest, a well-known ransomware group, added BMW…