The Pennsylvania Supreme Court ruled that police do not need a warrant to access an individual’s Google searches during investigations. This decision sets a legal precedent in Pennsylvania and could influence warrantless internet search policies nationwide. #PennsylvaniaSupremeCourt #GoogleSearchData…
Category: Cyber Security News
The US cybersecurity agency CISA warns that hackers are exploiting a critical vulnerability in the discontinued Asus Live Update utility, linked to Operation ShadowHammer and Chinese state-sponsored hacking group APT41. Over 1 million users could be affected, but only around 600 specific devices were targeted. #OperationShadowHammer #APT41…
Hewlett Packard Enterprise (HPE) has released security patches for critical vulnerabilities in its OneView management software and Telco Service Activator platform. The updates address remote code execution, authentication bypass, and DoS vulnerabilities, emphasizing the importance of timely application. #HPEOneView #CVE202537164 #TelcoServiceActivator…
A vulnerability affecting motherboards from ASRock, Asus, Gigabyte, and MSI can enable early-boot attacks via malicious PCIe devices. This flaw exploits UEFI and IOMMU misconfigurations, risking data leakage and system compromise, especially in environments with physical access. #PCIeVulnerability #IOMMUFlaw…
Microsoft has identified a bug caused by November 2025 Windows updates that leads to RemoteApp connection failures in Azure Virtual Desktop environments on Windows 11 24H2/25H2 and Windows Server 2025 devices. Organizations can temporarily mitigate this issue through registry modifications and rollbacks while Microsoft works on a permanent fix. #WindowsUpdates #AzureVirtualDesktop
HPE has released security patches for a critical vulnerability (CVE-2025-37164) in its OneView infrastructure management software, which could allow remote code execution by unauthenticated attackers. Organizations using affected versions should urgently apply updates to prevent potential exploitation. #HPEOneView #CVE202537164
Artificial intelligence copilots and agents are transforming SaaS applications by enabling dynamic data connections and automation, leading to increased security challenges. Traditional SaaS governance struggles to keep pace with AI-driven activity, necessitating the adoption of real-time, adaptive security measures. #Microsoft365Copilot #AIcopilots…
A 22-year-old French individual has been arrested following a major cyberattack on the Interior Ministry, which exposed sensitive judicial and security data. Authorities are actively investigating the scope of the breach, which involved unauthorized access by organized hackers. #BreachForums #FrenchInteriorMinistry…
France is investigating a suspected cyberattack targeting an international passenger ferry, potentially involving remote control software. Authorities suspect foreign interference, with Russia being a likely source, amid broader allegations of hybrid warfare by Russia against European nations. #Russia #CyberattackOnFerry…
Exein, an Italy-based IoT security firm, has raised €100 million to expand globally and enhance its product offerings, now totaling €170 million in 2025 funding. Their AI-powered security platform, embedded into IoT device firmware, offers runtime security and vulnerability analysis, protecting over one billion devices worldwide. #Exein #IoTsecurity #runtimeSecurity…
The Richmond Behavioral Health Authority (RBHA) experienced a ransomware attack that compromised the personal information of over 113,000 individuals. The Qilin group claimed responsibility and published a large amount of stolen data, raising concerns about data security in healthcare. #Qilin #RBHA #RansomwareAttack #DataBreach #HealthcareSecurity…
Kimsuky, a North Korean threat actor, has launched a campaign distributing Android malware called DocSwap through phishing sites and QR codes, mimicking logistics services like CJ Logistics. The malware features RAT capabilities, credential theft, and can perform extensive device monitoring, underlining sophisticated social engineering tactics. #Kimsuky #DocSwap #CJLogistics #AndroidMalware #RAT…
Cisco warns of a China-linked threat group’s exploitation of a new zero-day vulnerability (CVE-2025-20393) impacting its security products, with ongoing attacks targeting specific devices. The threat actor uses sophisticated tools like AquaShell, AquaPurge, and AquaTunnel to maintain persistence and facilitate remote access, highlighting the importance of vigilance in cybersecurity. #CVE202520393 #UAT9686…
Threat actors are exploiting a zero-day vulnerability (CVE-2025-40602) in SonicWall’s SMA 1000 appliance management console for local privilege escalation. Organizations are urged to update to the latest versions or apply mitigations to prevent remote code execution and unauthorized access. #CVE-2025-40602 #SonicWallSMA1000…
European law enforcement agencies have successfully dismantled a large-scale fraudulent call centre network operating in Ukraine, which targeted victims across Europe and caused losses exceeding EUR 10 million. The coordinated operation involved multiple countries and led to numerous arrests, seizures, and ongoing efforts to combat sophisticated scams. #Eurojust #UkraineCallCenters…