Texas Dept. of Transportation breached, 300k crash records stolen
The Texas Department of Transportation (TxDOT) is warning that it suffered a data breach after a threat actor downloaded 300,000 crash records from its database.…
Month: June 2025
An Open-Source Tool to See Through Encrypted Traffic in Linux systems
Qpoint has released Qtap, an open-source eBPF agent for monitoring network traffic in Linux systems. It hooks into TLS/SSL functions to capture data before and…
ISPConfig Vulnerability Allows Privilege Escalation to Superadmin and PHP Code Injection Exploit
A critical security vulnerability has been identified in ISPConfig version 3.2.12p1, a widely used open-source web hosting control panel. The vulnerability allows authenticated attackers to…
UK finance regulator tie-up with Nvidia allows firms to experiment with AI
The UK’s financial services regulator has teamed up with Nvidia to provide an environment to enable finance firms to test out artificial intelligence (AI) safely.…
Marks & Spencer restores some online-order operations following cyberattack
Marks & Spencer on Tuesday said it has resumed limited online-ordering capabilities after an April cyberattack that led to major disruptions at the U.K. department…
Ivanti Workspace Control hardcoded key flaws expose SQL credentials
Ivanti has released security updates to fix three high-severity hardcoded key vulnerabilities in the company’s Workspace Control (IWC) solution. IWC helps enterprise admins manage desktops…
New SharePoint Phishing Campaigns Employing Deceptive Lick Techniques
Security analysts at CyberProof’s Security Operations Center (SOC) have identified a sharp rise in phishing campaigns leveraging Microsoft SharePoint to bypass modern detection systems. Unlike…
20 Top-Level Domain Names Abused by Hackers in Phishing Attacks
Phishing attackers abuse TLDs like .li, .es, and .dev to hide redirects, steal credentials, and bypass detection. See top domains flagged by ANY.RUN in 2025.…
Rust-based Myth Stealer Malware Spread via Fake Gaming Sites Targets Chrome, Firefox Users
Cybersecurity researchers have shed light on a previously undocumented Rust-based information stealer called Myth Stealer that’s being propagated via fraudulent gaming websites. “Upon execution, the…
UK defence scheme invests in future cyber tech Cheri
SCI Semiconductors, a Cambridge-based tech company working on Capability Hardware Enhanced Risc Instructions (Cheri) systems to manage cyber defences, is to receive funding from the…
From malware to deepfakes, Gen AI is transforming cyberattacks
Listen to the article 4 min This audio is auto-generated. Please let us know if you have feedback. NATIONAL HARBOR, Md. — Artificial intelligence is turbocharging…
Massive Heroku outage impacts web platforms worldwide
Heroku is suffering a widespread outage that has lasted over six hours, preventing developers from logging into the platform and breaking website functionality. Heroku is…