A Dutch man was sentenced to seven years for hacking port systems using malware to facilitate drug smuggling. Authorities utilized encrypted messaging platform data to build a case against him, exposing criminal activities involving port infrastructure. #SkyECC #EncroChat…
Category: Cyber Security News
SAP has released 17 security notes addressing various vulnerabilities, including four critical-severity flaws that could lead to system compromise. Organizations using SAP software should promptly apply these patches to mitigate potential exploitation risks. #CVE-2026-0501 #SQLInjection #CriticalVulnerabilities…
A critical vulnerability has been identified in Broadcom Wi-Fi chipsets that can be exploited to disrupt network connectivity through specially crafted Wi-Fi frames. This flaw affects many routers, including Asus devices, and bypasses WPA2 and WPA3 protections, posing serious risks to enterprise and consumer networks. #BroadcomVulnerability #WiFiDisruption…
Endesa, Spain’s largest electric utility, suffered a data breach exposing customer personal and contract data on its commercial platform. The company has activated incident response measures and notified authorities, emphasizing vigilance against potential phishing attacks. #Endesa #EnergíaXXI #DataBreach #Spain #Cyberattack…
A ransomware attack at the University of Hawaii’s Cancer Center in August 2025 led to data theft including historic personal information of research participants. The university responded by paying a ransom for decryption and took measures to secure its systems, but not all individuals have been notified yet. #ClopRansomware #HarvardUniversity #UniversityOfHawaii
A security incident in Apex Legends allowed bad actors to remotely hijack players’ characters and disrupt matches, but Respawn assured it was not due to malware or exploits. The incident was linked to elevated server privileges possibly used for cheats, impacting a large player base. #ApexLegends #GameSecurity #Respawn
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch a high-severity Gogs vulnerability (CVE-2025-8110) that is being exploited in active zero-day attacks. This flaw allows attackers to overwrite sensitive system files and execute arbitrary commands, putting numerous Gogs servers and federal systems at risk. #CISA #GogsVulnerability
Cybercriminals are increasingly using the browser-in-the-browser (BitB) technique to deceive Facebook users and steal credentials. These sophisticated phishing campaigns leverage trusted cloud services to evade detection and target over three billion Facebook users. #BitBphishing #FacebookCredentialTheft
A Dutch man received a seven-year prison sentence for hacking, extortion, and drug trafficking facilitation through cybercrime. Authorities linked him to port system breaches and the illegal import of cocaine, emphasizing the role of encrypted messaging and malware in his operations. #SkyECC #PortHacking
A new wave of GoBruteforcer attacks targets cryptocurrency and blockchain project databases to build botnets for brute-forcing various Linux server services. These campaigns exploit weak defaults, legacy web stacks, and misconfigured servers to infect hosts and facilitate cybercriminal activities such as blockchain balance querying. #GoBruteforcer #LinuxServers…
Cybercriminals have uploaded malicious npm packages disguised as legitimate n8n integrations to steal OAuth credentials from developers. This campaign exploited the n8n workflow automation platform, increasing supply chain risks for centralized credential vaults. #n8n #npmMalware…
Hungary has granted asylum to Poland’s former justice minister Zbigniew Ziobro amid allegations of involvement in a major spyware scandal. The case involves charges of embezzlement and illegal surveillance, highlighting political tensions within the EU. #Ziobro #PolishSpywareScandal…
Hackers are selling a purported collection of Armenian government-related data, raising concerns about a potential breach. Researchers suggest the data may have been accessed through the civil litigation platform, potentially exposing citizens to social engineering attacks. #dk0m #civil litigation platform…
Iran has shut down internet access nationwide amidst ongoing protests, with plans to limit access to approved sites. This rapid and comprehensive blackout has significantly hindered information flow, while protests continue with reports of casualties and arrests. #IranProtests #InternetBlackout…
Russian state-sponsored group APT28 is conducting credential-harvesting campaigns targeting energy, defense, and government organizations using sophisticated phishing tactics. They heavily rely on free hosting, tunneling, and link-shortening services to evade detection and maintain operational flexibility. #APT28 #CredentialHarvesting…