U.S. authorities have charged a Ukrainian hacker, Victoria Dubranova, for her involvement in cyberattacks supporting Russian hacktivist groups targeting critical U.S. infrastructure such as water systems, election sites, and nuclear facilities. These groups, notably CARR and NoName057(16), carried out damaging DDoS attacks, breaching vital systems and endangering public safety. #CARR #NoName057(16) #U.S.CriticalInfrastructure #RussianHacktivists
Category: Cyber Security News
A new phishing kit named Spiderman is targeting European banks and fintech services by creating realistic fake sites to steal login info and authentication codes. Its modular design allows for continuous updates, making it a significant threat to financial institutions and cryptocurrency wallets. #Varonis #SpidermanPhishing
The Jaguar Land Rover cyberattack highlighted the critical vulnerabilities in manufacturing supply chains, especially through compromised third-party software. Ensuring strict secure software development practices and certifications like IEC 62443-4-1 can help prevent similar catastrophic breaches. #JaguarLandRover #SupplyChainSecurity #SSDLCL #IEC62443
Over 10,000 Docker Hub container images were found to expose sensitive data, including live credentials for organizations like a Fortune 500 company and a major national bank. These leaks often stem from careless practices like storing secrets in files or hardcoding API keys, posing critical security risks. #DockerHub #SecretsExposure
Microsoft is developing a new Teams feature, the “External Domains Anomalies Report,” to detect suspicious external communication patterns and enhance security. This tool aims to assist IT admins in identifying potential data-sharing risks without disrupting normal collaboration, rolling out worldwide in February 2026. #MicrosoftTeams #ExternalDomainsAnomalies
Three critical vulnerabilities have been identified in the PCIe IDE protocol affecting high-speed data transfer standards from PCIe 5.0 onwards, posing risks such as data disclosure and privilege escalation. Exploiting these flaws requires physical or low-level access, making them low-severity but potentially impactful for sensitive systems. #Intel #AMD #PCIeIDE #SecurityVulnerabilities…
A cyberattack on Russia’s Aeroflot was linked to a Moscow-based software firm, Bakka Soft, which maintained access to the airline’s systems. The breach, claimed by Ukrainian-affiliated hackers Silent Crow and Belarusian Cyber-Partisans, caused significant flight cancellations and financial losses. #SilentCrow #BakkaSoft #Aeroflot…
A 19-year-old man in Spain was arrested for stealing and selling 64 million personal data records from nine companies. The investigation also uncovered illegal hacking equipment and cryptocurrency wallets linked to the cybercrime activities. #DataTheft #Cybercriminals #Spain #HackerForums…
A Ukrainian national was extradited to the U.S. and charged with involvement in Russian hacktivist groups CARR and NoName057(16), which are financially supported by the Russian government. The groups have launched DDoS attacks and cyber intrusions supporting Russia’s geopolitical interests, including tampering with public water systems. #CyberArmyofRussia_Reborn #NoName057(16) #RussianHackers #CriticalInfrastructureAttacks…
A Ukrainian woman, Victoria Dubranova, faces charges in the US for her alleged involvement with pro-Russia hacktivist groups CARR and NoName057(16), responsible for numerous cyberattacks worldwide. These groups, linked to Russian military intelligence, targeted critical infrastructure and government entities, with US authorities offering substantial rewards for information. #CyberArmyofRussia_Reborn #NoName057(16) #GRU…
The SecurityWeek Cyber AI & Automation Summit will be held online from December 10-11, 2025, featuring a 3D virtual environment. It will explore the latest developments in AI, machine learning, and automation for cybersecurity, highlighting both opportunities and threats. #PredictiveAI #MachineLearning #CyberAutomation…
Israeli cybersecurity companies secured a record $4.4 billion in funding in 2025, reflecting significant growth and maturity in the industry. Notable investments in AI security and endpoint security demonstrate the sector’s expanding focus and global interest. #Armis #CatoNetworks…
The U.S. Department of Justice has taken action against Russian cyber groups CARR and NoName057(16), accusing them of targeting critical infrastructure globally on Moscow’s behalf. Key figures like Ukrainian national Victoria Dubranova face charges, with ongoing trials and international law enforcement collaboration. #CARR #NoName057(16) #VictoriaDubranova…
Microsoft addressed 57 security issues in its December 2025 Patch Tuesday update, fixing critical vulnerabilities including one exploited zero-day. Threat actors could leverage some of these vulnerabilities for privilege escalation, highlighting the importance of timely patching. #CVE-2025-62221 #MicrosoftThreatIntelligence…
Microsoft issued patches for 56 security flaws in Windows and other products at the end of 2025, including one actively exploited vulnerability. The update addresses multiple critical and important flaws, with emphasis on the use-after-free CVE-2025-62221 affecting file system filter drivers used by major cloud storage services. #CVE-2025-62221 #WindowsSecurity #PatchTuesday…