Researchers from Israel’s INDA have uncovered SpearSpecter, a sophisticated cyber-espionage campaign allegedly linked to Iranian threat actors working for IRGC-IO, targeting high-level government and defense officials. The operation employs social engineering, fileless malware, and cloud-based command-and-control channels to infiltrate its targets. #IRGCIO #SpearSpecter…
Category: Cyber Security News
Dutch authorities seized around 250 servers from a bulletproof hosting service used by cybercriminals for illicit activities. This operation disrupted ransomware, botnet, and phishing campaigns, highlighting law enforcement efforts to combat anonymous cybercrime infrastructure. #BulletproofHosting #OperationEndgame
A cyberattack on Princeton University compromised a database containing biographical information of alumni, donors, faculty, and students, but did not include sensitive financial or credential data. The incident was caused by a phishing attack that targeted a university employee, and officials have since secured the system. #PrincetonUniversity #PhishingAttacks
Kamel Ghali is an expert in automotive cybersecurity, focusing on hacking prevention and vulnerability assessment in vehicles. His insights highlight the evolving challenges as vehicles become more connected and software-driven. #TeslaModel3 #VehicleHacking…
Logitech disclosed a cybersecurity incident involving a zero-day vulnerability in a third-party software platform, which exposed limited employee and customer data. The attack did not impact Logitech’s products or operations, and the company plans to mitigate damages through cyber insurance. #Clop #OracleEBusinessSuite…
A ransomware attack on the Pennsylvania Office of the Attorney General compromised sensitive personal data and disrupted the state’s legal system. The attack was attributed to the INC ransomware gang, with investigations linking it to vulnerable Citrix NetScaler devices. #INC #CitrixBleed2…
Several critical vulnerabilities in IBM AIX for Power servers could allow remote attackers to execute commands, access private keys, or traverse directories, posing a serious threat to high-security environments. While no exploits have been reported yet, experts advise immediate patching to prevent potential attacks targeting NIM infrastructure. #IBM #AIXVulnerabilities…
This article details a large-scale npm registry supply chain attack involving a token farming campaign that infected thousands of packages without traditional malware. It highlights the evolving threat landscape driven by financial incentives and the importance of industry collaboration in defending open source ecosystems. #npm #teaxyz #OpenSSF…
Mitsubishi Electric’s MELSEC iQ-F Series faces a remote exploitation vulnerability allowing attackers to cause denial-of-service conditions via TCP communication. Proper mitigation, such as VPN use and physical access restrictions, is recommended to prevent attacks. #MitsubishiElectric #CVE-2025-10259…
Akira ransomware has caused significant financial loss, with over $244 million in proceeds since late September 2025, and has demonstrated advanced tactics including data exfiltration in just over two hours. The ransomware exploits vulnerabilities in SonicWall, Veeam, and SSH, using various methods such as tunneling tools and remote access to breach…
A significant data leak at Chinese cybersecurity firm Knownsec exposed sensitive hacking tools and operations involving over 20 countries. The breach underscores the depth of state-backed cyber espionage and the need for improved cybersecurity defenses. #Knownsec #CyberEspionage…
Microsoft is actively working to resolve a bug caused by misconfigured authentication components that prevent users from installing Microsoft 365 desktop apps on Windows. A final fix is expected to be deployed later today, but the issue has impacted some users and regions, marking it as a critical incident. #Microsoft365 #authenticationmisconfiguration
The Pennsylvania Office of the Attorney General experienced a significant ransomware attack in August 2025, resulting in the theft of sensitive personal and medical data. The INC Ransom gang claimed responsibility, highlighting ongoing threats to government agencies from ransomware-as-a-service operations. #INC Ransom #Citrix Bleed2
A security vulnerability in DoorDash’s systems allowed anyone to send branded emails from their servers, enabling potential phishing campaigns. The issue was patched after a prolonged disclosure process, amid disputes between the researcher and the company. #DoorDash #EmailSpoofing
Microsoft revealed that the Aisuru botnet launched a massive 15.72 Tbps DDoS attack targeting its Azure network, originating from over 500,000 IP addresses. The botnet, part of the Turbo Mirai class, exploits IoT devices and was also linked to record-breaking attacks by Cloudflare and Qi’anxin. #Aisuru #TurboMirai #Azure #Cloudflare #QiAnxin