Month: October 2025
-
Warlock Ransomware: Old Actor, New Tricks?
The Warlock ransomware, first appearing in June 2025, is linked to a China-based actor with a history dating back to…
-
Lunar Spider Expands their Web via FakeCaptcha
Lunar Spider, a Russian cybercriminal group, has expanded its initial access methods by compromising vulnerable websites with CORS vulnerabilities, particularly…
-
Experian fined $3.2 million for mass-collecting personal data
Experian Netherlands has been fined EUR 2.7 million ($3.2 million) for multiple violations…
-
TikTok videos continue to push infostealers in ClickFix attacks
Cybercriminals are using TikTok videos disguised as free activation guides for popular software like Windows, Spotify, and Netflix to spread…
-
UK: ‘Catastrophic’ attack as Russians hack files on EIGHT MoD bases and post them on the dark web
Lydia Veljanovski and Sean Rayment report: Russian hackers have stolen hundreds of sensitive military documents containing details of eight RAF…
-
Security Affairs newsletter Round 546 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs…
-
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 67
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape————————————————————————————————————————————-Malware Newsletter[Astaroth:…
-
A business’s cyber insurance policy included ransom coverage, but when they needed it, the insurer r
Allardyce Bower Consulting paid more than $14,000 for a cyber insurance policy that included ransom coverage, but when they needed…
-
PoC Exploit Released for Linux-PAM Vulnerability Allowing Root Privilege Escalation
A high-severity vulnerability in the Pluggable Authentication Modules (PAM) framework was assigned the identifier CVE-2025-8941.This vulnerability stems from the heart…
-
WatchGuard VPN Vulnerability Let Remote Attacker Execute Arbitrary Code
WatchGuard has disclosed a critical out-of-bounds write vulnerability in its Fireware OS, enabling remote unauthenticated attackers to execute arbitrary code…