Risk
-
Nippon Steel Solutions Reports Data Breach Amid Cybersecurity Investigation
Nippon Steel Solutions has reported a data breach following a zero-day vulnerability exploitation, impacting customer and employee data. The company is investigating the incident while implementing stricter security measures.
-
New Vulnerability in ServiceNow Exposes Sensitive Data to Low-Privileged Users
A newly identified vulnerability in ServiceNow, known as Count(er) Strike, allows low-privileged users to access sensitive data improperly, prompting urgent calls for enhanced security measures from enterprises using the platform.
-
DoNot APT Expands Cyber Espionage Attacks in Europe
Recent cyber espionage activities attributed to the DoNot APT group highlight an alarming expansion of their operations targeting European foreign affairs ministries and other government entities, utilizing sophisticated malware to harvest sensitive information.
-
CISA Identifies Four Critical Vulnerabilities Under Active Exploitation
CISA has identified four critical vulnerabilities under active exploitation, urging organizations to take immediate action to update their systems to protect against potential threats.
-
Ingram Micro Confirms Ransomware Attack Amid Ongoing IT Outage
Ingram Micro is facing a significant cybersecurity crisis due to a ransomware attack that has resulted in a multi-day IT outage, seriously disrupting services for customers and partners globally. The company is working with cybersecurity experts to manage the breach and restore operations.
-
Employee Arrested Following Major Cyber Heist at Brazilian Financial Software Firm
Following a cyberattack that resulted in the theft of $140 million from Brazilian financial institutions, authorities have arrested an employee of C&M Software, alleging he sold login credentials to hackers who exploited the system.
-
TAG-140 Group Targets Indian Government with New DRAT V2 Malware
The TAG-140 hacking group has been identified as a serious threat to Indian governmental organizations, employing a sophisticated new version of a remote access trojan called DRAT V2. This group has augmented its operations by spoofing official portals and evolving its malware capabilities, raising alarms about national security.
-
Cisco Issues Urgent Update to Address Critical Vulnerability in Unified Communications Manager
Cisco has issued an urgent security alert regarding a critical vulnerability in its Unified Communications Manager systems, urging users to upgrade to new software updates to prevent potential exploitation.
-
Massive Phishing Scam Targets Online Shoppers Worldwide with Fake E-commerce Sites
A significant phishing scam originating from China has created numerous fake e-commerce websites that impersonate well-known brands, aiming to steal sensitive financial information from online shoppers worldwide. Cybersecurity firm Silent Push exposes this operation, urging consumers to be cautious and aware of the ongoing threat.
-
Major Mobile Ad Fraud Operation IconAds Discovered
The IconAds mobile ad fraud operation, involving 352 Android apps, has been disrupted, according to HUMAN. The malicious apps generated 1.2 billion daily bid requests, primarily targeting users in Brazil, Mexico, and the US, before their removal from the Play Store.
