A new Linux malware framework called VoidLink has been identified, designed with a modular structure focused on infiltrating cloud environments and Linux systems. Its sophisticated features suggest it may be geared toward espionage or supply-chain attacks targeting software engineers. #VoidLink #LinuxMalware #CloudSecurity #CobaltStrike…
Category: Cyber Security News
Verizon Wireless is experiencing a nationwide outage, causing customers’ phones to display SOS mode with no cellular service. Multiple carriers, including AT&T and T-Mobile, are also reporting outages, highlighting a potential widespread connectivity problem. #VerizonOutage #CellularDisruption
A critical vulnerability in Fortinet’s FortiSIEM allows remote attackers to execute unauthorized commands, with technical details and a public exploit now available. Fortinet has patched the flaw across most supported versions, but unpatched systems remain at risk. #CVE-2025-25256 #FortinetSIEM
French authorities have fined Free Mobile €42 million for failing to adequately protect customer data, following a major data breach exposing millions of users in October 2024. Despite improvements, the company violated several GDPR rules, highlighting ongoing vulnerabilities in telecommunication cybersecurity. #GDPR #FreeMobile #DataBreach
Kyowon Group, a South Korean conglomerate, suffered a ransomware attack that disrupted operations and potentially exposed customer data. The incident impacted thousands of accounts and added to a series of recent cyberattacks on South Korean companies. #Kyowon #Ransomware #DataLeak #SouthKoreaCyberAttacks
AI agents are transforming organizational workflows by automating and orchestrating complex processes across multiple systems, offering significant productivity gains. However, their broad permissions pose hidden security risks by enabling privilege escalation and bypassing traditional access controls. #AIAgents #PrivilegeEscalation…
Lumen Technologies has successfully disrupted over 550 command-and-control nodes linked to the AISURU and Kimwolf botnets, which have infected over 2 million Android devices and compromised residential proxies. The Kimwolf botnet exploits vulnerable Android TV devices and compromised routers to facilitate DDoS attacks, proxy services, and malicious activities, highlighting a growing…
Authorities in Uganda have implemented an indefinite internet blackout and suspended mobile services ahead of the upcoming general election, citing the need to prevent misinformation and electoral fraud. Human rights organizations condemn the shutdown as a violation of free expression and transparency, raising concerns about political repression. #UgandanElection #InternetBlackout…
California and the UK are investigating xAI’s Grok AI tool for spreading nonconsensual sexual images, including deepfakes involving minors. Despite the company’s assurances, several countries are restricting access, highlighting ongoing concerns over AI-generated explicit content. #GrokAI #Deepfakes #xAI #ElonMusk…
RedVDS, a cybercriminal subscription platform, was dismantled by Microsoft and law enforcement, preventing over $40 million in fraud. The service provided disposable virtual computers used for phishing, scams, and targeted financial crimes worldwide, especially in sectors like real estate and healthcare. #RedVDS #CyberCrimeAsAService…
A Texas federal judge dismissed a securities class action lawsuit against CrowdStrike related to a major outage caused by a software update in July 2024. The incident impacted numerous sectors worldwide, but the court found that shareholders failed to prove deliberate fraud by the company. #CrowdStrike #SoftwareUpdate #LegalVictory…
Aikido Security, a Belgian startup focused on secure application development, has raised $60 million in its Series B funding round, bringing its valuation to $1 billion. The company’s platform offers comprehensive security tools for the software development lifecycle, used by over 100,000 teams worldwide. #AikidoSecurity #SeriesBFunding…
This article discusses vulnerabilities in popular AI and ML Python libraries used with Hugging Face models, which could allow remote attackers to embed malicious code in metadata. The flaws involve Hydra’s instantiate() function, and while fixes and CVEs have been issued, there remains potential for exploitation. #HydraSecurity #NeMo #Uni2TS #FlexTok #HuggingFaceModels…
Microsoft took down RedVDS, a cybercrime service offering disposable virtual machines that facilitated massive-scale fraud and cyberattacks globally. This operation highlights how cybercrime-as-a-service platforms enable criminal enterprises to carry out financial theft and sophisticated scams at an industrial level. #RedVDS #CybercrimeAsAService…
The World Economic Forum’s annual cybersecurity outlook highlights AI as the primary driver of change and concern in cybersecurity, with organizations increasingly assessing AI security risks. Top concerns include AI vulnerabilities, cyber-enabled fraud, and geopolitical threats, prompting organizations to adopt AI-driven defense strategies and governance models. #AIsecurity #CyberEnabledFraud…