North Korea’s Fake Recruiters Feed Stolen Data to IT Workers
The North Korean threat actor behind the DeceptiveDevelopment campaign is supplying stolen developer information to the country’s horde of fraudulent IT workers, ESET reports. Initially…
Category: SecurityWeek
No Patches for Vulnerabilities Allowing Cognex Industrial Camera Hacking
Some of the industrial cameras made by Cognex are affected by potentially serious vulnerabilities, but they will not receive a patch. The cybersecurity agency CISA…
New XCSSET macOS Malware Variant Hijacks Cryptocurrency Transactions
An updated variant of the sophisticated XCSSET macOS malware is monitoring the system clipboard to hijack cryptocurrency transactions, Microsoft warns. First observed in the wild…
Recent Fortra GoAnywhere MFT Vulnerability Exploited as Zero-Day
Exploitation of a recently disclosed Fortra GoAnywhere MFT vulnerability started at least one week before patches were released, cybersecurity firm watchTowr reports. Fortra fixed the…
Cisco Firewall Zero-Days Exploited in China-Linked ArcaneDoor Attacks
Cisco on Thursday released emergency patches for two firewall vulnerabilities exploited as zero-days in attacks linked to the ArcaneDoor espionage campaign. Tracked as CVE-2025-20333 (CVSS…
Salesforce AI Hack Enabled CRM Data Theft
Prompt injection and an expired domain could have been used to target Salesforce’s Agentforce platform for data theft. The attack method, dubbed ForcedLeak, was discovered…
PyPI Warns Users of Fresh Phishing Campaign
The Python Package Index (PyPI), the default platform for Python’s package management tools, is warning users of a fresh phishing campaign relying on domain confusion…
Perspective: Why Politics in the Workplace is a Cybersecurity Risk
When I first started working, politics was intentionally kept out of the workplace, regardless of how strongly different people may have felt about their own…
Chinese Cyberspies Hacked US Defense Contractors
A Chinese cyberespionage group has compromised at least two US defense contractors and various other organizations in the Americas, Europe, Asia, and Africa, cybersecurity firm…
RTX Confirms Airport Services Hit by Ransomware
Aerospace and defense giant RTX (formerly Raytheon Technologies) has officially confirmed that airport services have been disrupted as a result of a ransomware attack. The…
Chinese Spies Lurked in Networks for 393 Days, Hunted for Zero-Day Intel
Researchers in Google’s Threat Intelligence Group and Mandiant unit have analyzed a recent Chinese cyberespionage campaign where the hackers have managed to dwell in compromised…
CSA Unveils SaaS Security Controls Framework to Ease Complexity
Software as a Service (SaaS) is an increasingly favored method for delivering security solutions, but also an increasingly favored attackers’ playground. The cause of the…