Mount Royal University Confirms Data Stolen in Ransomware Attack
Mount Royal University (MRU), a public university in Alberta, Canada, has confirmed that employee and student data was stolen from its network in a disruptive…
Category: SecurityWeek
Unpatched Backdoor in Tenda Firmware Grants Admin Access to Devices
A security researcher has discovered an undocumented backdoor in multiple Tenda firmware versions that provides attackers with administrative access to a device’s web management interface.…
China-Linked APT Expands Arsenal With New ‘Leash’ Backdoors
A China-linked advanced persistent threat (APT) actor building an operational relay box (ORB) network for espionage has been updating its arsenal with new backdoors, Cisco’s…
Accenture Confirms Data Breach After Hacker Claims Source Code Theft
Professional services giant Accenture confirmed a data breach after a hacker claimed the theft of internal source code from the company. The incident came to…
Webinar Today: Why Email Security Keeps Failing
Live Webinar: Wednesday, July 8, 2026 – Register to Attend You can block every phishing email in the inbox. The campaign still runs. The infrastructure…
Iran-Linked Hackers Using Modular C&C Framework in Cyberattacks
An Iran-linked advanced persistent threat (APT) actor has been using a modular command-and-control (C&C) framework in recent attacks targeting organizations in Israel, Check Point reports.…
Critical Adobe ColdFusion Vulnerability Exploited in Attacks
Threat actors are exploiting a recently patched vulnerability in Adobe ColdFusion that carries a maximum severity rating. Tracked as CVE-2026-48282 (CVSS score of 10/10), the…
Critical Gitea Flaw Under Active Exploitation, Researchers Warn
Threat actors are exploiting a vulnerability in Gitea’s reverse-proxy authentication mechanism to access internet-accessible instances by supplying only a valid username. Specific to Gitea’s official…
County Government Reportedly Paid $1 Million to Cyber Extortion Group
A government entity in the US reportedly paid a $1 million ransom to the Kairos cyber extortion group to prevent the public dissemination of information…
CISA Reportedly Using Anthropic’s Mythos to Scan Government Software for Flaws
The US Cybersecurity and Infrastructure Security Agency (CISA) is using Anthropic’s powerful Mythos AI model to scan and audit federal government software for security vulnerabilities, according…
Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems
A newly disclosed Linux kernel vulnerability can be exploited to escape virtual machines (VMs) and execute code on the underlying host, security researchers warn. Tracked…
North Korean Hackers Target Open Source Developers in Supply Chain Attacks
North Korean hackers are targeting open source software developers with a backdoor and an information stealer as part of a broad supply chain campaign, Socket…