The Cybersecurity and Infrastructure Security Agency (CISA) and partners released an updated advisory on Akira ransomware, highlighting new tactics, techniques, and indicators of compromise. The threat actors continue to target various sectors, exploiting vulnerabilities in edge devices, backup servers, and using advanced evasion and lateral movement strategies. #AkiraRansomware #Storm1567 #VulnerabilityExploitation…
Category: Cyber Security News
Brightpick AI’s warehouse automation platform has multiple critical vulnerabilities, including unprotected access and credential exposure, risking sensitive data and control of robotic functions. Authorities like CISA recommend strict network controls and secure remote access to mitigate these threats. #BrightpickAI #CISAVulnerabilities…
Chinese state-sponsored hackers used Anthropic’s AI technology to automate a high-level espionage campaign, executing most attack stages without direct human intervention. This marks a significant evolution in cyber threats, demonstrating how AI can facilitate large-scale, sophisticated attacks targeting global organizations. #Anthropic #ClaudeCode…
In Q3 2025, the ransomware ecosystem became more decentralized with 85 active groups, reflecting resilience despite law enforcement efforts. The resurgence of LockBit 5.0 indicates potential re-centralization, while new threat actors continue to emerge. #LockBit #RansomHub…
The Akira ransomware group has amassed over $244 million through its cyberattacks, targeting critical infrastructure and business systems worldwide. They utilize sophisticated methods, including vulnerability exploitation and credential theft, to gain access and deploy ransomware on vulnerable systems. #AkiraRansomware #CVE202440766…
Nearly 10,000 individuals’ personal data was stolen in a cyberattack exploiting Oracle E-Business Suite vulnerabilities, with some organizations refusing to pay ransom. The Cl0p ransomware group, associated with FIN11, targeted multiple organizations including The Washington Post, Harvard, and American Airlines. #Cl0p #FIN11 #OracleEBS #DataBreach…
Checkout.com experienced a data breach involving a legacy third-party cloud storage system, which was exploited by the ShinyHunters group. The company reports no impact on payment processing or merchant funds and is using the incident to boost cybersecurity awareness. #ShinyHunters #ScatteredLAPSUS$Hunters…
This article highlights the top 100 cybersecurity leaders in the U.S. who are shaping a safer digital future through innovation, policy, and leadership. Their efforts span government, private sector, and academia, reflecting the critical importance of cybersecurity in national security and infrastructure protection. #ColonialPipeline #FederalCybersecurityFunding…
ASUS has released a firmware update to fix a critical authentication bypass vulnerability affecting several DSL series routers, preventing unauthorized remote access. Users are advised to apply the latest firmware or implement mitigation measures to reduce the risk of exploitation, especially against botnet attacks. #CVE-2025-59367 #ASUSRTrouters
Cybersecurity experts warn about a critical authentication bypass vulnerability in Fortinet Fortiweb WAF, which has been actively exploited in the wild to create unauthorized admin accounts. Organizations using vulnerable versions are urged to patch immediately to prevent device compromise. #FortiwebWAF #authenticationbypass…
Google has successfully disrupted the Lighthouse phishing service operated by the Smishing Triad cybercriminal group through legal action. The takedown aims to protect over a million users from SMS phishing campaigns impersonating trusted organizations. #SmishingTriad #LighthousePhishing…
A China-linked threat actor has exploited Anthropic’s AI system, Claude Code, to conduct a large-scale espionage campaign targeting organizations worldwide in sectors like finance, government, and technology. This demonstrates how AI-powered tools can be weaponized for sophisticated cyberattacks with minimal human oversight. #ClaudeCode #Anthropic #Espionage #AIAbuse…
Imunify360’s security vulnerability poses a significant threat to millions of Linux-based websites, allowing potential full system compromise through malicious files. The flaw affects the vulnerable Ai-Bolit malware scanner and has prompted a security patch, though exploitation in the wild is yet to be confirmed. #Imunify360 #CloudLinuxSoftware…
A recent series of DDoS attacks targeted Danish government and defense websites, causing temporary outages and prompting heightened security measures. These cyber incidents are believed to be linked to pro-Russian hacker group NoName057 and are part of a broader pattern of Russian-backed cyber activity in Europe. #NoName057 #Danishgovernment #Ukrainenevidence…
Checkout.com experienced a data breach due to unauthorized access to a legacy cloud system by the threat group ShinyHunters. The incident did not affect core payment data, and the company responded by refusing ransom and donating the demanded amount to cybersecurity research institutions. #ShinyHunters #LegacyCloudSystem…