BleepingComputer (1 hour ago)
SonicWall warned customers of two security flaws affecting end-of-life Global Management System (GMS) systems that will not be patched.
Read the full story on BleepingComputer.
mSeven Software is warning current and former mSecure password manager customers to change passwords, reset two-factor authentication, and remove passkeys following a cyberattack that reportedly exposed an encrypted customer database.
A phishing campaign used Google Calendar invites, trusted redirects, and fake login pages to hijack corporate Google sessions and bypass MFA protections.
Hackers took control of cold rooms holding blood plasma at three sites of France’s national blood service. They pushed the temperature settings to extreme levels. Yet, alarms caught the change before any plasma or samples were damaged, the Établissement français du sang (EFS) said on Tuesday.
French cooperative bank Crédit Mutuel Arkéa has confirmed that hackers accessed its systems and carried out fraudulent transactions, although the bank says the incident has been contained and customers’ money is safe.
The UK’s National Cyber Security Centre (NCSC) says attackers will highly likely use AI-powered malware in a ransomware attack on critical national infrastructure by 2028. The warning is in the NCSC annual review, The State of the Cyber Nation, published on 3 November.
Artificial intelligence is changing how enterprises approach cybersecurity, particularly within security operations centers. The promise is straightforward. AI agents can analyze alerts, investigate suspicious activity, and help security teams respond with greater efficiency.
A federal grand jury indicted two Canadians suspected of hacking multiple US universities and using the compromised systems to mine for cryptocurrency.
The US Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that attackers have started exploiting a recently patched high-severity WordPress vulnerability in the wild.
A large-scale watering hole attack associated with Russian hackers has been targeting iOS and Android users visiting compromised sites or fake ones impersonating legitimate portals.
Attackers have compromised the update infrastructure for the cPGuard web security suite to distribute a backdoor and a data-stealing script.
69 active sources
24 Turkish · 45 English
All sources
