Category: Cyber Security
-
Two critical PHP flaws have prompted the PHP security team to announce emergency updates for October 21. The announcement follows reports that information about the vulnerabilities circulated before their planned disclosure. In its October 20 advisory, the team scheduled the updates for 14:00 UTC on October 21. It assigned both vulnerabilities a severity score of…
-
A second Zeabur security breach in two months has prompted the developer hosting platform to announce its closure. The latest attack exposed information associated with 321,810 accounts and approximately 3.2 million environment-variable records. Attackers used leaked internal credentials to access hosting infrastructure, dedicated servers and the production database on October 14–15. Zeabur plans to begin…
-
The Ahold Delhaize cyberattack disrupted online shopping, mobile apps and other services across the United States and Europe. The retailer took some systems offline after discovering malicious activity, although its physical stores remained open. In an October 19 update, the company outlined its recovery progress. Several European websites and apps had returned, while teams continued…
-
A Revolut outage disrupted payments, transfers and app access worldwide on October 20, leaving thousands of customers struggling to use their accounts. The company later confirmed that it had restored all services following a Google Cloud incident. Revolut said customers’ money and personal data remained safe throughout the disruption. However, the outage affected a broad…
-
A police deepfake case in South Korea has raised questions about recruitment checks after authorities charged and detained a serving officer. The 28-year-old sergeant allegedly created sexual deepfakes of acquaintances and distributed unlawful material through Telegram. Records submitted by the National Police Agency to lawmaker Seo Myeong-ok describe approximately 400 deepfake videos and more than…
-
The Rank Math compromise turned some official downloads of the paid WordPress SEO plugin into a delivery mechanism for malware. According to the vendor, affected copies of Rank Math PRO version 3.0.123 could compromise websites when administrators activated them. The malicious downloads were available between October 15 at 20:02 UTC and October 16 at 07:12…
-
The AOMEI supply chain attack used short-lived changes to vendor-hosted files to deliver malware through its Backupper software, researchers report. Attackers restored the original files within minutes, making subsequent checks appear normal. ManageEngine’s Threat Analysis Lab investigated the campaign alongside Google’s Threat Intelligence Group and Mandiant. They attributed the activity to a threat actor tracked…
-
The Bullhorn cyberattack has forced the staffing software company to disable platform access, disrupting recruitment and back-office services. The company took its systems offline to contain unauthorized activity while investigators assessed the incident. Bullhorn says it has isolated the issue and eliminated the immediate threat. Meanwhile, its team is working with CrowdStrike specialists to review…
-
F5 has released emergency security updates to address critical NGINX flaws that could allow remote attackers to crash vulnerable servers or execute code. The three most serious vulnerabilities affect systems running specific, non-default configurations. Attackers do not need existing privileges to exploit these weaknesses. However, code execution depends on additional conditions, including whether they can…
-
The Interpol deepfake campaign warns that a familiar face or voice no longer proves who is contacting you. Through staged scenarios, the initiative shows how criminals can impersonate employers and relatives to request money or sensitive information. The campaign addresses both workplace fraud and scams targeting families. Its central message encourages people to pause, check…