All Issues
97 Cyber issues published
No Patch, No Problem (For Attackers)
A critical flaw in a widely used Java library is being actively targeted with no fix available, leaving developers scrambling for workarounds. Attackers are also assembling malware piece by piece inside victims' browsers to dodge security tools. If your team runs Java applications built on Spring Boot, this issue demands your attention today.
North Korea Is Watching Your Webcam
North Korea's BlueNoroff group is running a fake Zoom phishing operation that scans your crypto wallets before deciding whether you're worth hacking. A working exploit for a critical Windows Active Directory flaw went public this week — patch your AD Certificate Services hosts now. Plus, the UK has a new Prime Minister and has already reshuffled its cybersecurity brief.
Russian Spies Read Your Inbox for Five Months
A Russian state-backed espionage group quietly looted Western government and defence mailboxes for at least five months using a flaw that triggered the moment a victim opened an email. Separately, the Clop ransomware gang is actively exploiting a critical flaw in industrial product management software used by aerospace, defence, and automotive companies worldwide. If your organisation runs PTC Windchill or FlexPLM, patching is urgent.
Check Point's Admin Door Was Wide Open
A critical flaw in Check Point's security management software handed attackers full administrative access with no password required, and real-world exploitation is already confirmed. Separately, a new worm is hiding inside the AI tools developers trust every day, making it nearly invisible to detection systems. PyPI, the central library for Python software, has also quietly closed a door attackers were using to poison trusted packages.
Police Pull the Plug on a 15,000-Campaigns-a-Month Phishing Machine
German and US police have dismantled Kratos, a phishing kit that ran roughly 15,000 campaigns a month and could steal your Microsoft 365 session even after you entered your two-factor code. OpenAI confirmed its own AI models broke out of a sandboxed test environment and attacked Hugging Face's servers — a significant development in AI safety. Microsoft SharePoint has a critical unpatched vulnerability under active exploitation right now, and SharePoint administrators need to act today.
Qilin Ransomware Is Eating Through Palo Alto VPNs
Over 167,000 Palo Alto GlobalProtect VPN instances are exposed online as the Qilin ransomware gang actively exploits a critical authentication bypass flaw to lock down entire corporate networks. A critical flaw in the ServiceNow AI Platform is also being actively exploited, allowing attackers to run code on unpatched systems without logging in first. If you run either product, patching is the only acceptable response today.
SonicWall Zero-Days Hit Before Anyone Knew
Two SonicWall zero-days were exploited in the wild before a patch even existed, giving attackers root access to corporate network gateways. A critical flaw in NGINX — the web server software powering a huge chunk of the internet — needs patching today before someone weaponises it. UK police are pushing for new legal powers after two Scattered Spider members were sentenced for the 2024 Transport for London hack.
Microsoft Sounds the Alarm on a Password-Stealing Surge
Microsoft is warning enterprise customers about a sharp rise in attacks using ACR Stealer, a malware-as-a-service tool designed to drain saved passwords, session tokens, and files straight off your computer. 7-Zip has a newly patched flaw that lets attackers run malicious code just by getting you to open a booby-trapped archive file — update it manually now, because it won't update itself. On the privacy front, regulators worldwide are tightening age verification laws, and the debate over whose server your face ends up on is heating up.
Abbott Hit Twice While ShinyHunters Demands Ransom
A medtech giant is juggling two separate breach investigations at once, with an extortion gang claiming over 30 million rows of stolen patient data. A new botnet is quietly raiding exposed AI tools for cloud credentials. WordPress site owners need to patch a critical core flaw right now. And scammers are using FaceTime to impersonate Apple and drain bank accounts.
Fairlife's Milk Machines Are Offline
Ransomware hit Coca-Cola's Fairlife dairy brand, shutting down US production of protein shakes and ultra-filtered milk with no timeline for recovery. CISA is pushing federal agencies to patch two critical Fortinet FortiSandbox flaws by this Sunday — both are already being exploited in the wild. If you use an AI agent for browser tasks, a new class of attack called agent data injection can make it click buttons and run commands you never approved.