Policy
-
Naval Group Investigates Cyber Attack Exposing Sensitive Data
Naval Group, a major player in the French defense industry, is investigating a cyber attack after hackers leaked sensitive internal data online. The incident raises serious security concerns as the hackers threaten to disseminate additional data if no response is received.
-
Cybercrime Group Scattered Spider Targets VMware ESXi in Coordinated Attacks
Scattered Spider has intensified its attacks against VMware ESXi hypervisors in North America, employing advanced social engineering tactics that pose an acute risk to critical infrastructure. Google’s Mandiant team warns that organizations must adopt proactive security measures to defend against these targeted attacks.
-
New Ransomware Group ‘Chaos’ Emerges Following Takedown of BlackSuit
The emergence of Chaos, a new ransomware group that is likely a rebranding of BlackSuit, highlights ongoing challenges in the fight against ransomware. Following Operation CheckMate, which dismantled BlackSuit’s operations, evidence suggests Chaos retains similar encryption methods and tactics, using social engineering to target victims.
-
Mitel Issues Critical Security Patch for MiVoice MX-ONE Amid Vulnerability Concerns
Mitel Networks has released critical security updates for its MiVoice MX-ONE platform, addressing an authentication bypass vulnerability and a high-severity SQL injection flaw in MiCollab, urging customers to apply patches promptly.
-
Hacker Compromises Amazon’s AI Coding Extension, Raises Concerns Over Security
A hacker compromised Amazon’s AI coding extension, raising serious concerns about the security of generative AI tools and software supply chains. The incident highlights critical vulnerabilities in the integration of open-source code and underscores the need for improved security measures.
-
White House Unveils AI Action Plan with Cybersecurity Focus Amid Budget Concerns
The White House has introduced an AI action plan filled with cybersecurity measures, as it aims to secure the United States’ leadership in artificial intelligence. The plan faces scrutiny for its lack of specific implementation guidelines amidst proposed federal budget cuts.
-
US Coast Guard Enforces New Cybersecurity Rules for Marine Transportation System
The US Coast Guard has implemented new cybersecurity regulations for the Marine Transportation System, aiming to enhance defenses against emerging cyber threats and ensure the safety of US ports.
-
UK Government Seeks Ban on Ransom Payments by Public Sector Amid Rising Cyber Threats
The UK government plans to ban public sector organizations from paying ransoms to combat rising cybercrime, particularly ransomware attacks, which pose significant risks to economic and operational stability.
-
Chinese Cyber Syndicates Laundering Millions through India’s Financial System
A new report reveals that Chinese cyber syndicates are laundering over $580 million annually in India through illegal payment gateways and fake apps, posing a significant risk to the country’s financial security and economic trust.
-
Active Exploitation Campaign Targets Microsoft SharePoint Zero-Day Flaw
A critical vulnerability in Microsoft SharePoint Server, tracked as CVE-2025-53770, is currently being exploited in a large-scale attack campaign, allowing unauthorized remote code execution. Organizations are urged to implement immediate protective measures.
