A large-scale brute force password attack is currently underway. This attack targets a variety of networking devices, including VPNs, firewalls, and security gateways. Almost 2.8 million IP addresses are being used to breach systems from major vendors such as Palo…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning about a significant security vulnerability in Trimble Cityworks. This GIS-centric asset management software is widely used by municipalities and organizations. The flaw, identified as CVE-2025-0994, is actively…
Cisco has released critical updates to address two severe security vulnerabilities in its Identity Services Engine (ISE) platform. These flaws could allow remote attackers to execute arbitrary commands and escalate privileges, putting affected devices at significant risk. Cisco urges users…
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent directive for federal agencies to patch a critical vulnerability in the Linux kernel. This high-severity flaw, tracked as CVE-2024-53104, has actively been exploited in targeted attacks and could pose…
The Lazarus Group, a North Korea-linked cybercrime group, is running a campaign using fake LinkedIn job offers in the cryptocurrency and travel sectors. The malware targets Windows, macOS, and Linux systems. Bitdefender’s cybersecurity experts discovered the attack, which uses multiple…
In a notable evolution of tactics, the notorious Vietnamese cybercrime group known as XE Group has transitioned from its traditional credit card skimming operations to exploiting zero-day vulnerabilities in widely used enterprise software. This alarming development has emerged from a…
Texas Governor Greg Abbott has ordered a ban on the Chinese-owned AI platform DeepSeek and social media apps Xiaohongshu (RedNote) and Lemon8 from all state-issued devices. This makes Texas the first state to restrict DeepSeek, a growing competitor to OpenAI’s…
BeyondTrust has disclosed a recent security incident involving a breach of 17 Remote Support SaaS customers. This breach occurred after a hacker exploited a compromised API key. The attack began on December 5, 2024, when a zero-day vulnerability in a…
In 2024, Google took significant steps to protect its Android ecosystem. The company blocked more than 2.36 million apps that violated its policies, preventing them from being published on the Google Play Store. Moreover, Google banned over 158,000 developer accounts…
Italy’s data protection authority, the Garante, has banned Chinese AI company DeepSeek over concerns about its data privacy practices. The move, announced on January 30, 2025, follows an investigation into DeepSeek’s data handling practices, specifically regarding the collection and storage…