25
Feb
2025

Background check, drug testing provider DISA suffers data breach

DISA Global Solutions, a Texas-based company that provides employment screening services (including drug and alcohol testing and background checks) for…

Belarus-Linked Ghostwriter Uses Macropack-Obfuscated Excel Macros to Deploy Malware
25
Feb
2025

Belarus-Linked Ghostwriter Uses Macropack-Obfuscated Excel Macros to Deploy Malware

Feb 25, 2025Ravie LakshmananMalware / Cyber Espionage Opposition activists in Belarus as well as Ukrainian military and government organizations are…

Color penguin
25
Feb
2025

New Auto-Color Linux backdoor targets North American govts, universities

A previously undocumented Linux backdoor dubbed ‘Auto-Color’ was observed in attacks between November and December 2024, targeting universities and government…

Sliver C2 Server Vulnerability Let Attackers Open a TCP connection to Read Traffic
25
Feb
2025

Sliver C2 Server Vulnerability Let Attackers Open a TCP connection to Read Traffic

A critical server-side request forgery (SSRF) vulnerability (CVE-2025-27090) has been identified in the Sliver C2 framework’s teamserver implementation, enabling attackers…

Naveen Goud
25
Feb
2025

Orange data breach details after HellCat Ransomware Attack

Orange Group, a telecom services provider based in France, has confirmed that one of its internal systems at its Romanian…

LightSpy Expands to 100+ Commands, Increasing Control Over Windows, macOS, Linux, and Mobile
25
Feb
2025

LightSpy Expands to 100+ Commands, Increasing Control Over Windows, macOS, Linux, and Mobile

Cybersecurity researchers have flagged an updated version of the LightSpy implant that comes equipped with an expanded set of data…

More than 400 SonicWall firewall instances remain vulnerable to attack
25
Feb
2025

More than 400 SonicWall firewall instances remain vulnerable to attack

Dive Brief: More than 5,000 instances of an authentication bypass flaw in SonicWall firewalls are exposed to the internet and…

UAC-0212 Hackers Launching Destructive Attack Targeting Critical Infrastructure
25
Feb
2025

UAC-0212 Hackers Launching Destructive Attack Targeting Critical Infrastructure

A sophisticated threat cluster tracked as UAC-0212 has escalated efforts to compromise critical infrastructure systems in Ukraine, according to a…

Hackers Exploit Fake GitHub Repositories to Spread GitVenom Malware
25
Feb
2025

Hackers Exploit Fake GitHub Repositories to Spread GitVenom Malware

Kaspersky’s Securelist exposes the GitVenom campaign involving fake GitHub repositories to distribute malware. Targeting developers with seemingly legitimate open-source projects,…

Jane Devry
25
Feb
2025

AI is coming for your passwords – better make them strong

Weak passwords, as various studies have shown, can be cracked in a second, but now AI can crack even stronger…

Hand with data streaming through it
25
Feb
2025

US drug testing firm says data breach impacted 3.3 million people

DISA Global Solutions, a leading US background screening and drug and alcohol testing firm, has suffered a data breach impacting…

LightSpy Expanded With 100+ Commands to Attack Android, iOS, Windows, macOS & Linux Users
25
Feb
2025

LightSpy Expanded With 100+ Commands to Attack Android, iOS, Windows, macOS & Linux Users

The LightSpy advanced persistent threat (APT) group has significantly upgraded its surveillance capabilities with a 100+ command framework targeting Android,…