The Balancer V2 platform experienced a significant security breach resulting in the theft of up to $128 million worth of assets. The attack exploited a smart contract vulnerability despite multiple security audits, highlighting challenges in DeFi security. #BalancerV2 #DeFiExploit…
Category: Cyber Security News
A threat group linked to Iran, Cyber Toufan, claims to have accessed and leaked videos from an Israeli defense contractor, including internal meetings and defense system details. The incident highlights the critical need to secure connected devices like cameras and peripherals in cybersecurity strategies. #CyberToufan #MayaEngineering #IranLinkedThreats…
The U.S. Treasury Department has imposed sanctions on North Korean financial institutions and individuals involved in cryptocurrency laundering, cybercrime, and IT worker schemes. These actions aim to disrupt North Korea’s illicit financial activities and cyber operations that threaten global security and the digital economy. #NorthKorea #cryptolaudering
International authorities successfully dismantled three large-scale credit card fraud and money laundering networks, preventing over ā¬750 million in attempted fraud and affecting millions of cardholders worldwide. This operation highlights the importance of international cooperation in combating complex cybercrime activities. #OperationChargeback #Eurojust
This article discusses strategies to prevent analyst burnout in Security Operations Centers (SOCs) by working smarter, not harder, through real-time context, automation, and integrated threat intelligence. Implementing advanced tools like ANY.RUN enhances efficiency, reduces false positives, and keeps analysts engaged. #SOCburnout #RealtimeThreatAnalysis…
The U.S. Treasury Department has imposed sanctions on North Korean individuals and entities involved in money laundering, cybercrime, and sanctions evasion to fund the regime’s nuclear and cyber activities. North Korean cyber actors have stolen over $3 billion through sophisticated malware and social engineering, using global IT workers and cryptocurrency to…
A new cyber espionage campaign named UNK_SmudgedSerpent has targeted U.S.-based experts focusing on Iran, employing sophisticated phishing tactics and impersonations to gather intelligence. The operation shows strong links to Iranian cyber groups like Charming Kitten and MuddyWater, indicating an evolving espionage ecosystem. #CharmingKitten #MuddyWater…
Hackers infiltrated Nikkeiās employee Slack accounts by using malware to steal credentials from personal computers, leading to the exposure of over 17,000 users’ information. The incident highlights the ongoing threat of infostealer malware targeting corporate communication tools. #InfostealerMalware #Nikkei #SlackSecurity…
Daylight, a cybersecurity startup, has raised $33 million to enhance its AI-powered Managed Detection and Response platform that offers autonomous, real-time threat analysis and containment. The company’s platform combines AI and human expertise to provide scalable, end-to-end cyber defenses across hybrid environments. #Daylight #MDR #AIsecurity…
A critical vulnerability in the Post SMTP WordPress plugin allows unauthenticated attackers to read logged emails and potentially take over website accounts, including administrators. Immediate updates to version 3.6.1 are crucial as active exploitation has begun, impacting hundreds of thousands of sites. #PostSMTP #WordPressVulnerability…
Microsoft has identified a bug in the October 2025 Windows security updates that causes some systems to boot into BitLocker recovery mode, primarily affecting Intel devices with Modern Standby support. Customers can resolve this issue using group policy mitigation or contact Microsoft Support for assistance. #BitLocker #WindowsUpdate #ModernStandby
The U.S. CISA has added two critical vulnerabilities in Gladinet and Control Web Panel to its KEV catalog due to active exploitation. These flaws include remote code execution and system file disclosure, posing significant risks to affected organizations. #Gladinet #ControlWebPanel…
A critical vulnerability in Control Web Panel (CWP) has been exploited in the wild, impacting thousands of Linux web hosting systems worldwide. Despite a patch being released, many instances remain exposed, increasing the risk of unauthorized command execution. #CVE-2025-48703 #CWP #Netlasio #Shodan…
India and Israel have strengthened their strategic partnership by signing an MoU focused on defense and cybersecurity collaboration. The agreement emphasizes joint development, innovation, and enhanced cooperation in AI and digital security to address modern threats. #IndiaIsrael #Cybersecurity #DefenseTechnology #ArtificialIntelligence…
Cybercriminals are exploiting a critical vulnerability in the Post SMTP plugin for WordPress, affecting over 400,000 sites and enabling complete administrator account hijacking. Immediate updates or disabling the plugin are essential to prevent full site compromise. #CVE-2025-11833 #Wordfence