Cyber on the geopolitical battlefield: beyond the “Big Four”
Regional conflicts are fueling a wider set of state-linked cyber threats, expanding offensive operations beyond the traditional major powers.
New ZeroDayRAT mobile spyware is reportedly targeting Android and iOS
ZeroDayRAT is reportedly targeting Android and iOS, but public evidence on exploits, victims, and technical details remains limited.
SQL injection bug in Quiz and Survey Master puts 40,000 WordPress sites at risk
A SQL injection flaw in the Quiz and Survey Master plugin could expose about 40,000 WordPress sites to database compromise.
GrayCharlie hijacks law firm sites to push RATs and infostealers
Recorded Future says GrayCharlie used compromised law firm WordPress sites to deliver NetSupport RAT, Stealc, and SectopRAT.
BridgePay ransomware attack disrupts payments, but card data risk appears limited
BridgePay says ransomware knocked services offline, though no cardholder data was compromised. The outage still highlights payment-sector fragility.
Google moves against IPIDEA residential proxy network tied to cybercrime
Google says it disrupted the IPIDEA residential proxy network, targeting infrastructure widely used to hide cybercrime and automated abuse.
FBI’s Operation Winter SHIELD urges organizations to harden networks against common attacks
The FBI’s Operation Winter SHIELD calls on organizations to adopt 10 core security measures to reduce cybercrime and nation-state risk.
France fines national employment agency €5m over 2024 data breach
France’s CNIL fined France Travail €5m over GDPR failures tied to its 2024 data breach response, highlighting security and incident-response gaps.
CISA warns critical Apeman camera flaws could expose live feeds and enable device takeover
CISA says critical flaws in Apeman ID71 cameras could let attackers seize control of devices or view live camera feeds.
Risk of AI model collapse will push zero trust data governance, Gartner says
Gartner says 50% of organizations will adopt zero trust data governance by 2028 to reduce AI model collapse risk.
Ransomware attacks on industrial operations are rising, Dragos warns
Dragos says ransomware is increasingly disrupting industrial operations, raising risks for production, safety, and supply chains.
Twitter whistleblower complaint alleges security failures and national security risk
Former Twitter security chief Peiter Zatko alleged major access-control and privacy failures that could pose risks to users and regulators.