Financial institutions are increasingly required to conduct comprehensive cybersecurity exercises due to new regulations like DORA and CORIE. Advanced simulation tools such as OpenAEV integrate technical and human responses, enhancing cyber-resilience and operational readiness. #DORA #CORIE #cyberresilience…
Category: Cyber Security News
Cisco has identified a new attack exploiting vulnerabilities in its Secure Firewall and Unified Contact Center Express products, urging immediate updates to prevent DoS and remote code execution. These flaws were exploited as zero-days in malware campaigns like RayInitiator and LINE VIPER, with patches now available. #CVEs2025-20333 #RayInitiator…
A new threat activity cluster called InedibleOchotense, linked to Russia, has been impersonating ESET in phishing campaigns targeting Ukrainian organizations, using trojanized installers and backdoors. This activity overlaps with Sandworm’s destructive campaigns and other threat groups like RomCom exploiting vulnerabilities for geopolitical aims. #InedibleOchotense #Sandworm #RomCom #UkrainianCyberattacks…
Ukraine’s grain industry has been targeted by Russian-backed hacking group Sandworm as part of efforts to weaken the wartime economy. Recent attacks involved destructive wiper malware like Zerolot and Sting, highlighting ongoing cyber threats linked to Russia’s military operations. #Sandworm #UkrainianGrainIndustry…
Agentic AI transforms traditional AI tools into autonomous systems capable of planning, executing, and collaborating across services, which offers significant operational advantages but also introduces new security risks. Proper governance, controls, and oversight are crucial to harness its benefits while minimizing vulnerabilities. #AgenticAI #AutonomousSystems…
Truffle Security has raised $25 million in Series B funding to enhance its secret scanning tools, including TruffleHog Enterprise and GCP Analyze. The company aims to improve secrets detection, remediation, and cloud security visibility, supported by investors like Intel Capital and a16z. #TruffleHog #GoogleCloud…
Tenable researchers uncovered seven new vulnerabilities in ChatGPT that can be exploited for data theft and malicious activities, involving features like memory, open_url, and url_safe. These findings highlight ongoing security challenges with prompt injection, website content analysis, and data exfiltration in large language models. #ChatGPTVulnerabilities #PromptInjection…
Google has released an emergency update for Chrome 142 to fix critical remote code execution vulnerabilities, including a high-severity flaw in WebGPU. The update is being rolled out gradually across desktop and Android devices to enhance security and prevent potential exploits. #WebGPU #CVE-2025-12725…
Russian hacker group Sandworm has launched multiple data-wiping malware attacks in Ukraine’s crucial sectors, including government, education, and grain exports. These destructive operations aim to sabotage Ukraine’s economy and infrastructure, highlighting the ongoing threat from state-sponsored actors. #Sandworm #APT44 #Ukraine #DataWiper #GrainSector
Cisco has released critical security patches for vulnerabilities in its UCCX software that could allow attackers to execute commands with root privileges. These flaws affect the Java RMI process and the CCX Editor application, emphasizing the need for urgent updates. #CVE202520354 #CiscoUCCX #RootPrivileges #ContactCenterSecurity
The threat actor Curly COMrades has been exploiting virtualization technology to evade detection and deploy custom malware on targeted systems. Their use of Hyper-V and virtual machines enables persistent remote control and avoids traditional security measures. #CurlyCOMrades #HyperV #Virtualization #CyberattackTools…
SonicWall disclosed that a state-sponsored threat actor stole all firewall configuration files stored in its cloud backup service, exposing encrypted credentials and configuration data. Customers are urged to verify backups and reset passwords to mitigate targeted attack risks. #SonicWall #Mandiant #CloudBackupThreats…
Cisco has issued patches for multiple vulnerabilities, including two critical flaws in their Unified Contact Center Express (Unified CCX) appliance that could allow remote code execution and privilege escalation. These security updates address flaws affecting several Cisco products, preventing potential exploitation by threat actors. #CiscoUnifiedCCX #RemoteCodeExecution…
Hyundai AutoEver America experienced a data breach caused by a hacker attack that compromised personal information of a small number of individuals. The breach involved the exposure of sensitive data such as Social Security numbers and driver’s license details, but the culprits remain unidentified. #HyundaiAutoEver #DataBreach…
Marks and Spencer experienced a significant decline in first-half profits due to a recent cyberattack, which caused substantial one-time costs. Despite operational disruptions and a profit plunge, the retailer maintained sales growth and remains cautiously optimistic about recovery. #Cyberattack #M&S #FinancialImpact…