The Georgia Superior Court Clerks’ Cooperative Authority (GSCCCA) has been compromised by a cyberattack, leading to restricted access to its critical real estate and civil case databases. The ransomware group Devman claims to have stolen 500GB of data and is demanding a ransom, highlighting increasing cyber threats to governmental and financial…
Category: Cyber Security News
Harvard University revealed a data breach affecting personal information of alumni, students, staff, and donors, stemming from a phone phishing attack. The institution has taken steps to contain the breach and is collaborating with cybersecurity experts and law enforcement. #HarvardUniversity #PhishingAttack…
Vijil, a cybersecurity startup focusing on AI agent security, has raised $17 million in a Series A funding round to expand its platform. The platform enhances AI trustworthiness by testing, securing, and continuously improving AI agents, supporting organizations in deployment and compliance. #AIsecurity #Vijil…
CISA warns about the increasing use of commercial spyware targeting mobile messaging app users through sophisticated exploits. Threat actors are leveraging zero-day and zero-click vulnerabilities to deliver malicious payloads, especially targeting high-value individuals. #NSOGroup #Landfall…
Cyble researchers have uncovered a new NFC relay attack campaign called “RelayNFC” targeting users in Brazil, which uses phishing sites to distribute an evasive malware that captures and relays payment card data. This sophisticated attack leverages real-time APDU relaying and WebSocket channels to execute full remote EMV transactions, highlighting the growing…
Dartmouth College has suffered a data breach caused by the Clop gang exploiting a zero-day vulnerability in Oracle E-Business Suite, leading to the theft of personal and financial information of affected individuals. The incident is part of a widespread extortion campaign targeting multiple organizations using same zero-day flaw. #Clop #OracleEBS #DataBreach #Harvard #GlobalLogic
Thousands of sensitive credentials and configuration data have been exposed through publicly accessible JSON snippets on online formatting tools, putting organizations in high-risk sectors at serious threat. Researchers found over 80,000 user pastes containing critical information, including API tokens, private keys, and PII, accessible via the platforms’ unsecured Recent Links feature. #JSONFormatter #CodeBeautify #SensitiveDataExposure
Cybersecurity researchers have uncovered a campaign exploiting Blender files to deliver the StealC V2 information stealer, targeting users through malicious .blend files on platforms like CGTrader. The attack leverages embedded Python scripts that execute upon opening, stealing data from browsers, wallets, and messaging apps. #StealC #BlenderSecurity…
Cybersecurity in 2026 is set to transform as threat actors increasingly leverage AI to automate and enhance attack methods, making defenses more challenging. SOc teams must adapt to smarter evasive threats and overwhelming alert volumes to maintain operational security. #ANY.RUN #ThreatIntelligence #SOC #AIThreats #IncidentResponse…
ToddyCat has been innovating its methods to access corporate email data using tools like TCSectorCopy and exploits like CVE-2024-11859. Their tactics include stealing browser credentials, extracting email files, and capturing access tokens, demonstrating evolving cyber espionage techniques. #ToddyCat #TCSectorCopy #CVE-2024-11859 #TomBerBil #SharpTokenFinder…
Canon’s subsidiary was targeted in a recent Oracle E-Business Suite hacking campaign, with the company confirming the incident was limited to a web server and has since been resolved. Several organizations, including Cox Enterprises and Mazda, have also been affected, with some suffering data breaches, while others have not confirmed any…
A new, more destructive variant of the Shai-Hulud worm has infected over 640 NPM packages, escalating supply chain attacks and data exfiltration efforts. Security researchers warn about its rapid spread and destructive capabilities across development environments and pipelines. #ShaiHulud #NPMpackages…
A data breach at SitusAMC has impacted major U.S. banks and financial institutions, including JPMorgan Chase, Citi, and Morgan Stanley. The company is investigating the incident and has taken steps to contain it, emphasizing the importance of vendor risk management in cybersecurity. #SitusAMC #DataBreach #JPMorganChase #Citi #MorganStanley…
SitusAMC has confirmed a data breach that exposed some client and customer information, raising concerns in the mortgage and real estate finance sectors. The company continues investigating the incident, which did not involve ransomware, and has taken additional security measures to protect its systems. #SitusAMC #DataBreach #Mortgage #RealEstateFinance…
A critical security flaw in Apache Syncope allows attackers to decrypt stored passwords due to a hard-coded AES key, risking data breaches. Organizations should upgrade affected versions promptly and enhance their key management practices. #ApacheSyncope #CVE-2025-65998…