News
-
UK regulator fines Capita £14m over 2023 cyberattack that exposed 6.6m people
The UK Information Commissioner’s Office has fined Capita £14 million after a 2023 cyberattack exposed data on about 6.6 million people; the ICO said failures in detection and privileged account controls allowed attackers to exfiltrate roughly 1 TB and deploy ransomware.
-
Researchers disclose two CVSS 10.0 flaws in Red Lion Sixnet RTUs
Security researchers have disclosed two CVSS 10.0 vulnerabilities (CVE-2023-40151 and CVE-2023-42770) in Red Lion Sixnet RTUs that can allow unauthenticated attackers to execute commands as root; vendors and agencies advise patching, enabling authentication and blocking TCP access.
-
Critical ICTBroadcast flaw (CVE-2025-2611) exploited to deploy reverse shells
A critical input-validation flaw in ICTBroadcast (CVE-2025-2611, CVSS 9.3) allows unauthenticated command injection via a session cookie; researchers including VulnCheck say the bug is being exploited to run reverse shells on exposed servers, and no patch information is currently available.
-
U.S. seizes $15 billion in Bitcoin, sanctions Southeast Asia cybercrime network tied to alleged Cambodian leader
U.S. authorities announced the seizure of 127,271 Bitcoin (about $15 billion) tied to Chen Zhi and unsealed an indictment alleging he ran the Prince Group, a Cambodia-based network of scam compounds linked to human trafficking and global fraud; coordinated U.S. and U.K. sanctions targeted people, businesses and the Huione Group.
-
ReliaQuest: Chinese-linked group converted ArcGIS server into long-term backdoor
ReliaQuest reported that a state-linked group known as Flax Typhoon modified an ArcGIS Java extension into a web shell, implanted it in backups and used it to run discovery, deploy a SoftEther-based VPN bridge and maintain access for over a year.
-
Council of Europe authorises EU to sign UN cybercrime convention
The Council of Europe authorised the European Commission and member states to sign the UN Convention against Cybercrime, a treaty adopted by the UN General Assembly in December 2024 that sets common rules for criminalising cyber offences and exchanging electronic evidence, with safeguards to protect human rights.
-
SimonMed says 1.2 million patients impacted in January data breach
SimonMed Imaging said more than 1.2 million people were affected by a data breach that gave attackers access to its network from Jan. 21 to Feb. 5; Medusa ransomware claimed the theft and the company said it found no evidence of misuse as of Oct. 10.
-
Netherlands places Nexperia under special administrative measures over governance concerns
The Netherlands has placed Chinese-owned Nexperia under special administrative measures under the Goods Availability Act, citing governance failures and risks to European chip capabilities; the company’s owner Wingtech has disputed the move and said it will effectively freeze operations.
-
Trend Micro: RondoDox botnet campaign expands to exploit more than 50 flaws across 30 vendors
Trend Micro said RondoDox campaigns have widened to exploit more than 50 vulnerabilities across over 30 vendors, using a loader-as-a-service model that bundles RondoDox with Mirai and Morte, and researchers linked the activity to large-scale botnet operations and coordinated RDP attacks.
-
Microsoft tightens Edge’s Internet Explorer mode after reports of exploit chain
Microsoft said it has tightened Internet Explorer mode in Edge after reports that attackers used social engineering and unpatched Chakra 0-day exploits to gain remote code execution and escalate privileges, and the company removed easier IE mode launch options and now requires explicit enabling.
