New password spraying attacks target Cisco, PAN VPN gateways
31
Dec
2025

New ErrTraffic service enables ClickFix attacks via fake browser glitches

A new cybercrime tool called ErrTraffic allows threat actors to automate ClickFix attacks by generating ‘fake glitches’ on compromised websites to…

Hackers Infiltrated Maven Central Masquerading as a Legitimate Jackson JSON Library
31
Dec
2025

Hackers Infiltrated Maven Central Masquerading as a Legitimate Jackson JSON Library

A new malware campaign has successfully infiltrated Maven Central, one of the most trusted repositories for Java developers, by masquerading…

Critical SmarterMail Flaw Allows Attackers to Execute Remote Code
31
Dec
2025

Critical SmarterMail Flaw Allows Attackers to Execute Remote Code

SmarterTools has issued an urgent security advisory regarding a critical vulnerability in its widely used SmarterMail software. The flaw, which…

report-ad-banner
31
Dec
2025

2 Security Experts Plead Guilty In BlackCat Ransomware Case

Two cybersecurity experts charged with deploying ALPHV BlackCat ransomware against five companies have pleaded guilty to federal charges in the…

'Korea’s Amazon' Coupang discloses a data breach impacting 34M customers
31
Dec
2025

Coupang announces $1.17B compensation plan for 33.7M data breach victims

Coupang announces $1.17B compensation plan for 33.7M data breach victims Pierluigi Paganini December 30, 2025 Coupang will spend about $1.17B…

European Space Agency Confirms Breach of Servers Outside the Corporate Network
30
Dec
2025

European Space Agency Confirms Breach of Servers Outside the Corporate Network

The European Space Agency (ESA) has confirmed a cybersecurity breach affecting a limited number of external servers, marking a rare…

New Spear-Phishing Attack Targeting Security Individuals in the Israel Region
30
Dec
2025

New Spear-Phishing Attack Targeting Security Individuals in the Israel Region

Israel’s National Cyber Directorate has issued an urgent alert warning of an active spear-phishing campaign specifically targeting individuals employed in…

Hackers Advertised VOID 'AV Killer' with Kernel-level Termination Claims
30
Dec
2025

Hackers Advertised VOID ‘AV Killer’ with Kernel-level Termination Claims

The cybercriminal threat actor known as Crypt4You has recently emerged on underground forums and dark web marketplaces, advertising a sophisticated…

Critical IBM API Connect Flaw Allows Attackers to Bypass Authentication
30
Dec
2025

Critical IBM API Connect Flaw Allows Attackers to Bypass Authentication

IBM has disclosed a critical authentication bypass vulnerability affecting its API Connect platform, assigning it a maximum CVSS severity score…

Massive Magecart with 50+ Malicious Scripts Hijacking Checkout and Account Creation Flows
30
Dec
2025

Massive Magecart with 50+ Malicious Scripts Hijacking Checkout and Account Creation Flows

A large-scale web skimming operation has emerged across the internet, targeting online shoppers and account holders with unprecedented scope. Security…

ESET Flags Rising Threat of AI-Driven Malware and Ransomware
30
Dec
2025

ESET Flags Rising Threat of AI-Driven Malware and Ransomware

The cybersecurity landscape entered a critical new era in the second half of 2025 as AI-powered malware transitioned from theoretical…

Oracle EBS Victims Include Korean Air, University Of Phoenix
30
Dec
2025

Oracle EBS Victims Include Korean Air, University Of Phoenix

Victims of the CL0P ransomware group’s August campaign targeting Oracle E-Business Suite vulnerabilities are still coping with the aftermath of…