Apache InLong CVE-2025-27522 Exposes RCE Attacks
A newly disclosed vulnerability, tracked as CVE-2025-27522, has been discovered in Apache InLong, a widely used real-time data streaming platform. The Apache InLong vulnerability introduces…
Category: DarkReading
Victoria’s Secret Website Down After Security Incident
The U.S. website of Victoria’s Secret is down after an unspecified security incident, the latest in a series of cyber incidents hitting retailers. A status…
UK Military Unveils £1B “Digital Targeting Web”
In a bold pivot toward modern warfare, the UK Ministry of Defence (MOD) has announced a £1 Billion (approximately $1.35B) investment to build out a…
New Russian Cyber Threat Laundry Bear Hits Western Targets
Dutch intelligence officials and Microsoft warned today of a new Russian threat actor targeting Western organizations in what appears to be a military and high-tech…
FBI Warns About Silent Ransom Group Targeting Law Firms
The FBI is warning that a threat group is using IT-themed social engineering calls and callback phishing emails to gain remote access to systems and…
Nova Scotia Cyberattack Exposes Data Of 280,000 Customers
Nova Scotia Power has confirmed it was the victim of a ransomware attack, weeks after initially alerting customers to a cybersecurity breach. The utility, owned…
Banking Groups Urge SEC To End Cyber Disclosure Mandate
Five major banking associations have formally petitioned the U.S. Securities and Exchange Commission (SEC) to repeal a rule that mandates public companies to disclose material…
Versa Concerto Vulnerabilities Patched, Including A 10.0
Versa Networks has patched three vulnerabilities in its Concerto network security and SD-WAN orchestration platform, including one that scored a 10.0, the highest possible severity…
Commvault M365 Threat Could Be Part Of Broader SaaS Campaign
Nation-state threat actors targeting Commvault applications hosted in Microsoft Azure may be part of a broader campaign targeting Software-as-a-Service (SaaS) applications, the U.S. Cybersecurity and…
Cloudflare Fixes CVE-2025-4366 In Pingora OSS Framework
Cloudflare has alerted users of a security vulnerability—tracked as CVE-2025-4366—in the widely used Pingora OSS framework. This vulnerability, a request smuggling flaw, was discovered by…
Europol Tighten Grip On Dark Web Crime
In an international law enforcement operation, 270 individuals involved in dark web criminal activity have been arrested across ten countries. Coordinated by Europol, the operation,…
$223M Exploit Halts Cetus Protocol: Here’s What We Know
In the ever-volatile world of decentralized finance (DeFi), yet another major exploit has shaken investor confidence—this time with a staggering $223 million theft from Cetus…