This article reveals how police departments have extensively used automated license plate readers to monitor protest activities across the U.S., with over 50 agencies conducting protest-related searches. The research highlights concerns over surveillance practices and the potential misuse of data for tracking activists and opponents of the government. #FlockSafety #ElectronicFrontierFoundation…
Category: Cyber Security News
Over 370 organizations participated in GridEx VIII, the largest cybersecurity and physical security drill for North America’s power grid. The exercise aimed to improve emergency preparedness against real-world cyber and physical threats, with increased participation from utilities and cross-industry sectors. #GridEx #NERC #PowerGridCybersecurity…
A critical vulnerability (CVE-2025-61757) in Oracle Identity Manager may have been exploited as a zero-day before its patch release. This flaw allows attackers to execute remote code, bypass authentication, and compromise sensitive systems, posing a serious threat to organizations handling user data. #OracleIdentityManager #ZeroDayExploit…
This week’s cybersecurity roundup highlights a surge in scanning targeting Palo Alto Networks and a major data breach affecting WEL Companies. Key issues include hacking incidents, legal battles over spyware, and new cyberattack techniques like network implants and AI prompt injections. #PaloAltoNetworks #NSOGroup #WELCompanies…
A new Android banking trojan called “Sturnus” offers extensive control over infected devices, including message capturing and remote actions. It poses a significant threat to financial institutions and user privacy, particularly in Europe. #Sturnus #BankingTrojan…
This report highlights vulnerabilities in iCam365 P201 and QC021 cameras allowing unauthenticated access to their video streams and configuration data. These issues could lead to unauthorized surveillance and configuration manipulation. #CVE2025-64770 #CVE2025-62674…
Cybersecurity researchers have uncovered a multi-year ATM fraud campaign by the UNC2891 threat group targeting Indonesian banks, utilizing advanced malware and social engineering tactics. The campaign involved cloned cards, money mule networks, and persistent system infiltration, highlighting the evolving nature of ATM-based cyber threats. #UNC2891 #STEELCORGI #CAKETAP #ATMrotection #BankA #BankB…
Salesforce is investigating suspicious activity involving Gainsight-connected apps, which may have led to unauthorized access to customer data. The company has revoked tokens and temporarily removed the applications from its marketplace to protect users. #Gainsight #OAuthTokens…
A China-linked threat actor known as APT24 has been using sophisticated malware called BADAUDIO to maintain persistent access to compromised networks through a campaign spanning nearly three years. The campaign includes supply chain attacks, web compromises, and spear-phishing, primarily targeting organizations in Taiwan and Southeast Asia. #APT24 #BADAUDIO…
Samsung Galaxy devices with Knox Suite offer an integrated, hardware-based security solution that simplifies management and enhances protection against threats. These tools enable enterprises to maintain security, boost productivity, and adapt to evolving cybersecurity challenges with confidence. #SamsungKnox #ZeroTrust #EnterpriseSecurity…
Two British teenagers face serious cybercrime charges related to a major attack on Transport for London and other U.S. healthcare networks. The case highlights the increasing threat of organized cybercriminal groups targeting critical infrastructure and healthcare sectors in both the UK and the US. #TransportforLondon #ScatteredSpider…
SquareX has identified a critical vulnerability in Perplexity’s Comet AI browser related to its Model Context Protocol (MCP) API and hidden extensions. The company warns that if exploited, cyber attackers could gain control of devices and execute malicious actions like ransomware and data exfiltration, although Perplexity disputes these claims. #Perplexity #CometBrowser…
APT24, a Chinese threat actor, has been conducting a sophisticated three-year cyberespionage campaign using various techniques like supply chain attacks, social engineering, and web compromises. The campaign showcases their use of custom malware such as BadAudio and their ability to adapt tactics over time. #APT24 #BadAudio #CobaltStrike #SupplyChainAttack…
SonicWall has released updates to fix critical vulnerabilities affecting their firewalls and Email Security appliances, addressing issues that could lead to device crashes and unauthorized system access. These flaws include buffer overflow bugs in the SonicOS SSL VPN service and high-severity system file modification vulnerabilities in Email Security. #SonicOS #BufferOverflow #EmailSecurityVulnerabilities…
The U.S. Justice Department has sentenced the co-founders of Samourai Wallet for laundering over $237 million using the platform’s cryptocurrency-mixing features. The case highlights how criminal actors exploited the platform to mask funds involved in drug trafficking, darknet operations, and various illegal activities. #SamouraiWallet #CryptocurrencyMixing…