Ukrainian defense forces are targeted by cyber attacks involving the PLUGGYAPE malware since late 2025, attributed to Russian threat actors. The attacks utilize messaging platforms, phishing, and advanced malware techniques to compromise systems and steal data. #VoidBlizzard #PLUGGYAPE…
Category: Cyber Security News
Node.js has released critical security updates addressing a vulnerability that could cause denial-of-service conditions in most production applications, especially those using async_hooks. The fix enhances error handling for stack overflows and impacts multiple framework and monitoring tools. #Node.js #async_hooks…
Nicole Ozer’s appointment to the California Privacy Protection Agency board signals a strengthened focus on privacy rights, digital civil liberties, and responsible data governance in California. This leadership update coincides with evolving national security and cybersecurity efforts, highlighting the importance of experienced governance in digital rights protection. #CaliforniaPrivacyAct #NicoleOzer #CalPrivacy #NSADeputyDirector…
A recent MS-ISAC advisory warns of multiple vulnerabilities in Fortinet products, including remote code execution risks. These flaws could impact enterprise, government, and education systems, emphasizing urgent patching and security measures. #FortiOS #CVE2025-25249…
VoidLink is an advanced, cloud-native Linux malware framework designed for modern cloud and container environments, featuring modular plugins and sophisticated anti-forensics capabilities. It is likely developed for commercial use or by a specific customer, with active development and Chinese-speaking developers. #VoidLink #LinuxMalware
Ukrainian Defense Forces were targeted by a cyber attack involving the PluggyApe backdoor malware, likely orchestrated by the Russian threat groups ‘Void Blizzard’ and ‘Laundry Bear’. These attacks, which exploited fake charity websites and messaging apps, focus on stealing sensitive information from NATO member states. #VoidBlizzard #LaundryBear #PluggyApe
A privacy expert with a background at the ACLU has been appointed to the California Privacy Protection Agency Board, potentially influencing its policy direction. Her extensive experience in civil liberties and technology positions her as a key advocate for privacy rights in California. #CaliforniaPrivacy #NicoleOzer…
Microsoft’s January 2026 Patch Tuesday addresses 112 CVEs, including a critical zero-day affecting Desktop Window Manager. Several high-risk vulnerabilities, such as privilege escalation and remote code execution flaws, have been fixed to strengthen system security. #CVE-2026-20805 #DesktopWindowManager…
Microsoft has released the January 2026 Patch Tuesday updates for Windows 11 versions 25H2/24H2 and 23H2, addressing security vulnerabilities, bugs, and adding new features. These updates are mandatory and include security patches for previous vulnerabilities, with fixes affecting networking, Power & Battery, Secure Boot, and Windows Deployment Services. #Windows11 #PatchTuesday #SecurityUpdates
Microsoft has launched the KB5073724 security update for Windows 10, addressing three zero-day vulnerabilities and fixing Secure Boot certificate expiration issues. This update is crucial for systems enrolled in the ESU program or using Windows 10 Enterprise LTSC to enhance security and stability. #ZeroDayFlaws #SecureBootCertificates
Microsoft is automatically updating Secure Boot certificates on compatible Windows 11 24H2 and 25H2 systems to prevent boot security issues caused by expiring certificates. This proactive measure helps maintain system integrity and security by ensuring that only trusted bootloaders can load during startup. #SecureBoot #Windows11 #CybersecurityUpdates
A Belgian hospital, AZ Monica, experienced a significant cyberattack, leading to server shutdowns, canceled procedures, and transferred critical patients. The incident has prompted police investigation and raised concerns about the potential involvement of ransom demands. #AZMonica #Cyberattack #HealthcareSecurity
A significant data breach at Central Maine Healthcare compromised the personal and health information of over 145,000 individuals. The incident highlights ongoing vulnerabilities in healthcare organizations and the importance of rapid response and protective measures. #CentralMaineHealthcare #DataBreach
Cybersecurity experts have uncovered a malicious Chrome extension that steals API keys from the MEXC cryptocurrency exchange by exploiting a browser session. This threat can enable attackers to control user accounts, execute trades, and drain wallets, highlighting the risks of browser-based attacks on crypto platforms. #MEXC #APIKeyTheft…
A sophisticated web skimming campaign targeting major payment networks has been active since January 2022, affecting enterprise organizations and e-commerce sites. The attack employs obfuscated JavaScript to steal credit card and personal information, evading detection through detection checks and fake payment forms. #Magecart #StarkIndustries…