Risk
-
Cybersecurity Threats Escalate as Greedy Sponge Targets Mexican Organizations
A sustained campaign by the hacking group Greedy Sponge targets Mexican organizations, deploying modified forms of AllaKore RAT and SystemBC, indicative of heightened cybersecurity risks and persistent operational success.
-
Data Leak Exposes 3.5 Million Customer Records at Australian Fashion Retailer SABO
A data breach at Australian fashion label SABO has exposed the personal information of over 3.5 million customers. The unsecured database contained sensitive data, including names, addresses, and order histories, creating significant risks of cyberattacks and financial fraud.
-
Critical Flaw in CrushFTP Exploited as Cybersecurity Concerns Grow
A critical security flaw in CrushFTP, CVE-2025-54309, is actively being exploited, raising concerns about risk exposure, especially in sensitive environments like government and healthcare. Experts emphasize immediate action for mitigation following the company’s alerts.
-
Chinese Cyber Syndicates Laundering Millions through India’s Financial System
A new report reveals that Chinese cyber syndicates are laundering over $580 million annually in India through illegal payment gateways and fake apps, posing a significant risk to the country’s financial security and economic trust.
-
Critical Cisco ISE Vulnerability Allows Pre-Authentication Command Execution
Cisco has issued an urgent advisory regarding a critical vulnerability in its Identity Services Engine (ISE) that allows unauthorized command execution. Rated 10/10 in severity, it was discovered by Kentaro Kawane and reported via Trend Micro. Cisco emphasizes the need for immediate action.
-
Chinese Hackers Breach U.S. National Guard Network, Compromise Sensitive Data
The Chinese hacking group Salt Typhoon has breached a U.S. Army National Guard network, compromising sensitive data and raising alarms over national cybersecurity.
-
Air Serbia Battles Cyberattack Amid Payroll Delays
Air Serbia is facing a significant cyberattack that has delayed payslips for employees while raising concerns over data security. The airline’s IT department continues to battle the breach amid a flurry of internal security measures.
-
Louis Vuitton Investigates Data Breach Affecting UK Customers Amid Ongoing Cybersecurity Concerns
Luxury fashion house Louis Vuitton is investigating a data breach that has exposed customer information tied to its UK operations. This breach is the third linked to LVMH brands in recent months, raising concerns about security practices across the luxury retail sector.
-
Critical SQL Injection Vulnerability Uncovered in Fortinet FortiWeb
Cybersecurity researchers have uncovered a critical SQL injection vulnerability in Fortinet’s FortiWeb Fabric Connector, allowing unauthenticated remote code execution. Organizations are urged to update their systems immediately to mitigate the risk of full system compromise.
-
Security Flaw in McDonald’s AI Hiring Tool Exposes Personal Data of 64 Million Job Seekers
A security flaw in McDonald’s AI hiring tool, McHire, has led to the exposure of personal data for over 64 million job seekers. Researchers discovered that default credentials and an Insecure Direct Object Reference vulnerability allowed unauthorized access to sensitive information.
