A man from Tennessee manipulated and accessed sensitive government systems, sharing details publicly on Instagram. His actions compromised systems of the U.S. Supreme Court, AmeriCorps, and the Department of Veterans Affairs. #SupremeCourt #AmeriCorps #VAHacking
Category: Cyber Security News
A new hardware vulnerability named StackWarp affects AMD processors with potential for remote code execution inside confidential VMs. This flaw compromises AMD’s SEV-SNP isolation and can be exploited through hyperthreading, impacting multiple AMD EPYC series processors. #StackWarp #AMDSEV SNP #EPYCProcessors…
Recent reports reveal that DevOps SaaS platforms like GitHub and Jira experienced a significant increase in incidents in 2024 and 2025, causing extensive operational downtime. To mitigate the risks of outages and data loss, organizations must adopt proactive resiliency strategies beyond relying solely on native cloud backups. #GitHub #Jira #AzureDevOps #DevSecOps…
Several Iranian state TV channels were briefly hijacked to broadcast protest messages and footage from exiled opposition leader Reza Pahlavi, highlighting ongoing civil unrest in Iran. The incident occurred via the Badr satellite during a period of heightened protests linked to economic hardship and governmental repression. #RezaPahlavi #IranProtests…
A new Python-based info stealer called SolyxImmortal employs legitimate APIs and third-party libraries to stealthily harvest and exfiltrate data on Windows systems. It features comprehensive surveillance capabilities and is linked to a Turkish-speaking threat actor, highlighting the ongoing threat of opportunistic malware campaigns. #SolyxImmortal #Cyfirma…
A Jordanian national pleaded guilty in a US court for selling unauthorized access to over 50 enterprise networks on an underground forum. The individual used cryptocurrency for transactions and faces potential sentences up to 10 years in prison. #FerasKhalilAhmadAlbashiti #undergroundforum #enterpriseNetworkAccess…
TP-Link has released a patch for a severe vulnerability (CVE-2026-0629) that allows remote attackers to take full control of over 32 models of VIGI C and InSight surveillance cameras. This high-severity flaw enables password bypass via the web interface, putting many devices at risk of unauthorized access and data theft. #CVE-2026-0629…
Cyble’s 2025 Threat Landscape Report highlights the resilience and evolution of cybercriminal ecosystems, particularly in ransomware operations, despite increased law enforcement efforts. The report emphasizes the shift towards extortion-only tactics, AI-assisted automation, and supply chain exploitation, affecting diverse sectors worldwide. #RansomwareEvolution #SupplyChainAttacks…
A critical security vulnerability in the All In One SEO plugin for WordPress has been disclosed, allowing low-privileged users to access a site-wide AI token. This flaw poses risks of AI token misuse, service depletion, and potential resource costs for over 3 million websites. #AllInOneSEO #WordPressVulnerability…
This article explains the importance of managing and deleting saved passwords in Google Chrome to enhance digital security. It highlights the risks of browser-based password storage and provides step-by-step guides for removing passwords across devices. #GooglePasswordManager #BrowserSecurity…
A recent Palo Alto Networks study highlights the increased cyber threats targeting the upcoming Milan Cortina 2026 Winter Olympics, focusing on potential attacks across the event’s digital ecosystem. Threat actors, motivated by financial gain, espionage, or activism, are expected to target ticketing systems, public infrastructure, and attendees. #PyeongChang2018 #Tokyo2024 #Paris2024 #Ransomware…
The European Standards Institute has released ETSI EN 304 223, a comprehensive guideline for securing AI systems throughout their lifecycle. This standard emphasizes AI-specific risks and provides a structured approach for cybersecurity measures applicable across industries. #ETSI #AIsecurity #AIlifecycle…
Activists briefly hijacked Iran’s Badr satellite to broadcast messages supporting protests and calling for military support, disrupting state TV coverage. This incident highlights evolving tactics in digital and satellite attack methods used in political activism. #BadrSatellite #IranProtests…
Cybersecurity researchers uncovered a cross-site scripting (XSS) vulnerability in the StealC information stealer’s control panel, revealing insights about the threat actor behind it. The breach exposed the threat actor’s location, operational practices, and security weaknesses, offering opportunities for further investigation. #StealC #YouTubeTA…
European and international law enforcement agencies have intensified efforts to apprehend suspects linked to the Black Basta ransomware operation, including the group’s alleged Russian leader, Oleg Nefedov. The investigation revealed the group’s extensive activities across multiple countries, causing significant financial damage and targeting critical sectors. #BlackBasta #OlegNefedov…