Fake Ukraine Police Notices Spread New Amatera Stealer and PureMiner
26
Sep
2025

Fake Ukraine Police Notices Spread New Amatera Stealer and PureMiner

Hackers are distributing malicious emails that imitate official notices from the National Police of Ukraine. This phishing campaign, identified by…

CISA Warns Of CVE-2025-20333 In Cisco ASA Devices
26
Sep
2025

CISA Warns Of CVE-2025-20333 In Cisco ASA Devices

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued Emergency Directive 25-03 in response to an ongoing and severe…

MIND Raises $30 Million for Data Loss Prevention
26
Sep
2025

Interpol Says 260 Suspects in Online Romance Scams Have Been Arrested in Africa

A crackdown on cybercrime coordinated by Interpol has led to the arrests across 14 African countries of 260 people suspected…

Maximum severity GoAnywhere MFT flaw exploited as zero day
26
Sep
2025

Maximum severity GoAnywhere MFT flaw exploited as zero day

Hackers are actively exploiting a maximum severity vulnerability (CVE-2025-10035) in Fortra’s GoAnywhere MFT that allows injecting commands remotely without authentication….

GitLab High-Severity Vulnerabilities Let Attackers Crash Instances
26
Sep
2025

GitLab High-Severity Vulnerabilities Let Attackers Crash Instances

GitLab has disclosed multiple high-severity Denial-of-Service (DoS) vulnerabilities that could allow unauthenticated attackers to crash self-managed GitLab instances.  These flaws…

Customer Authentication Challenges That Impact Your Organization’s Security Posture
26
Sep
2025

Customer Authentication Challenges That Impact Your Organization’s Security Posture

Introduction In today’s cybersecurity landscape, CISOs face the challenge of securing data while managing costs effectively. As cyber threats become…

Malicious MCP Server Discovered Stealing Sensitive Emails Using AI Agents
26
Sep
2025

Malicious MCP Server Discovered Stealing Sensitive Emails Using AI Agents

Enterprises everywhere are embracing MCP servers—tools that grant AI assistants “god-mode” permissions to send emails, run database queries, and automate…

Logo for Flo app
26
Sep
2025

Google and Flo to pay $56 million after misusing users’ health data

Popular period-tracking app Flo Health shared users’ intimate health data—such as menstrual cycles and fertility information—with Google and Meta, allegedly…

New COLDRIVER Malware Campaign Joins BO Team and Bearlyfy in Russia-Focused Cyberattacks
26
Sep
2025

New COLDRIVER Malware Campaign Joins BO Team and Bearlyfy in Russia-Focused Cyberattacks

The Russian advanced persistent threat (APT) group known as COLDRIVER has been attributed to a fresh round of ClickFix-style attacks…

ForcedLeak: Critical Salesforce AgentForce Vulnerability
26
Sep
2025

ForcedLeak: Critical Salesforce AgentForce Vulnerability

A recently disclosed security research report has revealed a severe vulnerability chain in Salesforce AgentForce, dubbed ForcedLeak, which highlights a…

Fortra GoAnywhere Vulnerability Exploited as 0-day Before Patch Released
26
Sep
2025

Fortra GoAnywhere Vulnerability Exploited as 0-day Before Patch Released

A critical, perfect 10.0 CVSS score vulnerability in Fortra’s GoAnywhere Managed File Transfer (MFT) solution was actively exploited as a…

Apache Airflow Vulnerability Lets Read-Only Users Access Sensitive Data
26
Sep
2025

Apache Airflow Vulnerability Lets Read-Only Users Access Sensitive Data

Apache Airflow maintainers have disclosed a serious security issue, tracked as CVE-2025-54831, that allows users holding only read permissions to…