New National Cyber Director Cairncross faces challenges on policy, bureaucracy, threats
Sean Cairncross took his post this week as national cyber director at what many agree is a “pivotal” time for the office, giving him a…
Latest Cybersecurity News — Page 2033
View all →
Akira and Lynx Ransomware Attacking Managed Service Providers With Stolen Login Credential and Vulnerabilities
Two sophisticated ransomware operations have emerged as significant threats to managed service providers (MSPs) and small businesses, with the Akira and Lynx groups deploying advanced…
Global Jewellery Brand Pandora Suffers Hacked
Danish jewellery giant Pandora has disclosed a significant data breach that compromised customer information through a third-party vendor platform. The company has begun notifying affected…
Black Duck Announces Enhancements to AI Powered Application Security Assistant
Black Duck has unveiled Black Duck Assist, which enables developers to find and fix security and compliance issues in human and AI-generated code in real…
Cyber criminals would prefer businesses don’t use Okta
Cyber criminal gangs are telling their targets to stop authenticating using Okta services in what the company’s threat management team is describing as a ringing…
Lazarus Hackers Trick Users Into Believing Their Camera or Microphone is Blocked to Deliver PyLangGhost RAT
Cybersecurity researchers have observed a new social engineering campaign attributed to North Korea’s Lazarus Group in recent weeks that leverages fake camera and microphone errors…
Hacker Accesses Millions of IMDataCenter Records from Exposed AWS Bucket
Cybersecurity researcher Jeremiah Fowler discovered a major data leak at a Florida-based data solutions provider, IMDataCenter. The leak exposed a massive database containing personal details…
Trend Micro fixes two actively exploited Apex One RCE flaws
Trend Micro fixes two actively exploited Apex One RCE flaws Pierluigi Paganini August 06, 2025 Trend Micro patched two critical Apex One flaws (CVE-2025-54948, CVE-2025-54987)…
New Ghost Calls tactic abuses Zoom and Microsoft Teams for C2 operations
A new post-exploitation command-and-control (C2) evasion method called ‘Ghost Calls’ abuses TURN servers used by conferencing apps like Zoom and Microsoft Teams to tunnel traffic…
Google’s Salesforce Instances Hacked in Ongoing Attack
Google has confirmed that one of its corporate Salesforce instances was compromised in June by the threat group tracked as UNC6040. This incident is part…
Fake Antivirus App Delivers LunaSpy Malware to Android Devices
A sophisticated cybercrime campaign has been discovered targeting Android users through fake antivirus applications that actually deliver LunaSpy spyware to victims’ devices. Security researchers have…
NCSC updates CNI Cyber Assessment Framework
The UK’s National Cyber Security Centre (NCSC) has rolled out a series of updates to its Cyber Assessment Framework (CAF) aimed at assisting operators of…