Interpol Says 260 Suspects in Online Romance Scams Have Been Arrested in Africa
A crackdown on cybercrime coordinated by Interpol has led to the arrests across 14 African countries of 260 people suspected in online romance and extortion…
Category: SecurityWeek
Microsoft Reduces Israel’s Access to Cloud and AI Products Over Reports of Mass Surveillance in Gaza
Microsoft said Thursday it had disabled services to a unit within the Israeli military after a company review had determined its artificial intelligence and cloud…
North Korea’s Fake Recruiters Feed Stolen Data to IT Workers
The North Korean threat actor behind the DeceptiveDevelopment campaign is supplying stolen developer information to the country’s horde of fraudulent IT workers, ESET reports. Initially…
No Patches for Vulnerabilities Allowing Cognex Industrial Camera Hacking
Some of the industrial cameras made by Cognex are affected by potentially serious vulnerabilities, but they will not receive a patch. The cybersecurity agency CISA…
New XCSSET macOS Malware Variant Hijacks Cryptocurrency Transactions
An updated variant of the sophisticated XCSSET macOS malware is monitoring the system clipboard to hijack cryptocurrency transactions, Microsoft warns. First observed in the wild…
Recent Fortra GoAnywhere MFT Vulnerability Exploited as Zero-Day
Exploitation of a recently disclosed Fortra GoAnywhere MFT vulnerability started at least one week before patches were released, cybersecurity firm watchTowr reports. Fortra fixed the…
Cisco Firewall Zero-Days Exploited in China-Linked ArcaneDoor Attacks
Cisco on Thursday released emergency patches for two firewall vulnerabilities exploited as zero-days in attacks linked to the ArcaneDoor espionage campaign. Tracked as CVE-2025-20333 (CVSS…
Salesforce AI Hack Enabled CRM Data Theft
Prompt injection and an expired domain could have been used to target Salesforce’s Agentforce platform for data theft. The attack method, dubbed ForcedLeak, was discovered…
PyPI Warns Users of Fresh Phishing Campaign
The Python Package Index (PyPI), the default platform for Python’s package management tools, is warning users of a fresh phishing campaign relying on domain confusion…
Perspective: Why Politics in the Workplace is a Cybersecurity Risk
When I first started working, politics was intentionally kept out of the workplace, regardless of how strongly different people may have felt about their own…
Chinese Cyberspies Hacked US Defense Contractors
A Chinese cyberespionage group has compromised at least two US defense contractors and various other organizations in the Americas, Europe, Asia, and Africa, cybersecurity firm…
RTX Confirms Airport Services Hit by Ransomware
Aerospace and defense giant RTX (formerly Raytheon Technologies) has officially confirmed that airport services have been disrupted as a result of a ransomware attack. The…