The Congressional Budget Office (CBO) successfully removed hackers after a sophisticated cyberattack targeted its email systems. The ongoing investigation involves federal and private sector partners, with no further unauthorized access observed. #CBO #Cyberattack #ForeignActor…
Category: Cyber Security News
A major battery manufacturer, LG Energy Solution, was affected by a ransomware attack claimed by the Akira gang, which also leaked significant data. The incident underscores the growing cybersecurity risks faced by battery and manufacturing industries. #LGEnergySolution #Akira #Ransomware #BatteryManufacturers…
Cloudflare’s recent service outage was caused by a latent bug after a routine configuration change, not a cyberattack. The incident affected major online platforms and critical organizations, highlighting the importance of robust service stability. #Cloudflare #LatentBug…
Fortinet reportedly patched a critical zero-day vulnerability (CVE-2025-64446) in FortiWeb without immediate disclosure, raising concerns about delayed notifications. Recent exploits highlight the risks of silent patching practices and emphasize the importance of prompt communication in cybersecurity. #CVE202564446 #FortiWeb #ZeroDayVulnerability…
A critical security flaw in the W3 Total Cache WordPress plugin exposes over a million websites to remote code execution attacks. Immediate updates and security measures are essential to protect sites from potential malicious exploitation. #CVEs #WordPressSecurity…
Cloudflare is currently investigating a widespread outage impacting its global network, resulting in “internal server error” messages for users worldwide. The incident has affected multiple services, with signs of recovery reported but ongoing issues still observed. #Cloudflare #ZeroTrust #WARP
The Tycoon 2FA phishing kit is a scalable, easy-to-use tool that bypasses multi-factor authentication, leading to full account compromise using real-time session hijacking. Enterprises must adopt biometric, phishing-proof identity solutions like FIDO2 hardware to combat evolving cyber threats. #Tycoon2FA #FIDO2
A data breach at Pajemploi, the French social security service for home-based childcare providers, exposed personal details of 1.2 million individuals. The incident did not affect financial data or operational services, but heightened concerns about biometric and identity theft risks. #Pajemploi #URSSAF #CNIL
Microsoft is enhancing Teams security features by allowing users to report false-positive threat alerts and providing better detection accuracy. These updates, including link warnings and screenshot blocking, will be available globally by the end of November 2025. #MicrosoftTeams #FalsePositiveReporting #ThreatDetection
Cybersecurity researchers uncovered a sophisticated attack targeting a U.S.-based real estate company using the new Tuoni command-and-control framework. The exploit involved social engineering, steganography, and AI-influenced code delivery, highlighting innovative misuse of red team tools. #Tuoni #RedTeamFramework…
This webinar provides practical strategies for securing cloud workloads and infrastructure while maintaining agility in business operations. It emphasizes the importance of proper access control and compliance with global security laws to prevent data breaches and cyberattacks. #CyberArk #CloudSecurity…
Meta has introduced the WhatsApp Research Proxy tool to facilitate research into WhatsApp’s network protocol, aiming to improve security and understand platform abuse. The company emphasizes efforts to lower barriers for researchers, backed by over $25 million paid in bug bounties and recent security updates addressing vulnerabilities and data exposure issues….
The UK’s MI5 warns Parliament members about Chinese spies using LinkedIn fake profiles to gather intelligence and influence politics. The government is investing heavily in cybersecurity upgrades to counteract ongoing foreign interference efforts. #ChineseSpies #LinkedInManipulation…
A suspected Russian hacker linked to the Kremlin-aligned threat actor Void Blizzard was arrested in Thailand and is facing extradition to the U.S. The group has targeted government, defense, and critical infrastructure organizations across Europe and North America, posing significant threats to NATO allies and Ukraine. #VoidBlizzard #LaundryBear…
The Trump administration is prioritizing the release of a new, coordinated national cyber strategy aimed at shaping adversary behavior and enhancing public-private partnerships. This upcoming strategy emphasizes swift action, modernization, and clear objectives, building on last year’s Biden administration plan. #NationalCyberStrategy #CyberPolicy…