Vulnerabilities have been discovered in the media systems of Skoda vehicles, allowing remote control of certain car functions and real-time tracking of their location. The findings were revealed by PCAutomotive during the Black Hat...
Cybersecurity researchers warn of data leakage risks and attacks targeting servers leveraging the Prometheus monitoring tool. According to Aqua Security, hundreds of thousands of Prometheus servers and exporters remain vulnerable to exploitation due to...
Germany’s Federal Office for Information Security (BSI) has assumed control of internet traffic originating within the country and directed towards the command-and-control (C2) servers operated by the BADBOX group. This decisive action by the...
At the international Virus Bulletin conference, experts from Kaspersky Lab presented their research on The Mask (Careto) group, renowned for its sophisticated cyberattacks since 2007. This group has historically targeted diplomatic entities, governmental organizations,...
In Myanmar, 45 individuals were detained on suspicion of involvement in a large-scale online fraud scheme in Shan State. During the raid, police confiscated Starlink equipment, mobile phones, and weapons. The measures to be...
The ISRG organization, which oversees the Let’s Encrypt project, has concluded the year by celebrating a record milestone—over 500 million websites now utilize its free TLS certificates. ISRG’s Executive Director, Josh Aas, reaffirmed the...
The Center for Vein Restoration (CVR), a Maryland-based medical clinic in the United States, has suffered a significant data breach affecting hundreds of thousands of individuals. Cybercriminals accessed highly sensitive information, including laboratory results...
Researchers at Akamai have discovered that threat actors are exploiting the built-in Windows UI Automation (UIA) framework, originally designed for interacting with user interface elements, to execute malicious actions covertly. This technique enables attackers...
Microsoft has addressed a critical vulnerability in its two-factor authentication system that allowed threat actors to bypass protections and gain unauthorized access to user accounts without their knowledge. The issue, dubbed AuthQuake, was identified...
Cybersecurity researchers have uncovered a new variant of the ZLoader malware, now leveraging DNS tunneling technology to communicate with its command-and-control (C2) server. This discovery underscores the continued evolution of the tool by threat...
The international donut chain Krispy Kreme has reported a cybersecurity incident that resulted in “certain operational disruptions, including issues with online ordering in some regions of the United States.” According to the company’s official...
On Wednesday, Google unveiled the next generation of its artificial intelligence systems, Gemini 2.0. The first model of the family, Gemini 2.0 Flash, is now available as a chatbot for public testing. Developers have...
