Latest Cybersecurity News and Articles
20 May 2025
A vulnerability in O2’s implementation of the IMS standard resulted in user location data being exposed in network responses.
The post O2 Service Vulnerability Exposed User Location appeared first on SecurityWeek.
20 May 2025
New CISA Deputy Director Madhu Gottumukkala has joined the agency from South Dakota’s Bureau of Information and Technology.
The post Madhu Gottumukkala Officially Announced as CISA Deputy Director appeared first on SecurityWeek.
20 May 2025
Threat hunters have exposed the tactics of a China-aligned threat actor called UnsolicitedBooker that targeted an unnamed international organization in Saudi Arabia with a previously undocumented backdoor dubbed MarsSnake.
ESET, which first discovered the hacking group's intrusions targeting the entity in March 2023 and again a year later, said the activity leverages spear-phishing emails using
20 May 2025
Cybersecurity researchers are calling attention to a new Linux cryptojacking campaign that's targeting publicly accessible Redis servers.
The malicious activity has been codenamed RedisRaider by Datadog Security Labs.
"RedisRaider aggressively scans randomized portions of the IPv4 space and uses legitimate Redis configuration commands to execute malicious cron jobs on vulnerable systems,"
20 May 2025
Cybersecurity researchers have uncovered malicious packages uploaded to the Python Package Index (PyPI) repository that act as checker tools to validate stolen email addresses against TikTok and Instagram APIs.
All three packages are no longer available on PyPI. The names of the Python packages are below -
checker-SaGaF (2,605 downloads)
steinlurks (1,049 downloads)
sinnercore (3,300 downloads)
19 May 2025
San Francisco incident response coordination startup banks $15 million in a Series A funding round led by Ballistic Ventures.
The post BreachRx Lands $15 Million as Investors Bet on Breach-Workflow Software appeared first on SecurityWeek.
19 May 2025
Procolored’s public website served dozens of software downloads containing information stealer malware and a backdoor.
The post Printer Company Procolored Served Infected Software for Months appeared first on SecurityWeek.
19 May 2025
Phishing threats are evolving at a pace that many security teams struggle to meet.
19 May 2025
The official site for RVTools has been hacked to serve a compromised installer for the popular VMware environment reporting utility.
"Robware.net and RVTools.com are currently offline. We are working expeditiously to restore service and appreciate your patience," the company said in a statement posted on its website.
"Robware.net and RVTools.com are the only authorized and supported websites for
19 May 2025
Several ransomware actors are using a malware called Skitnet as part of their post-exploitation efforts to steal sensitive data and establish remote control over compromised hosts.
"Skitnet has been sold on underground forums like RAMP since April 2024," Swiss cybersecurity company PRODAFT told The Hacker News. "However, since early 2025, we have observed multiple ransomware operators using it
19 May 2025
The UK’s Legal Aid Agency was targeted in a cyberattack in April and it recently determined that hackers have stolen sensitive data.
The post UK Legal Aid Agency Finds Data Breach Following Cyberattack appeared first on SecurityWeek.
19 May 2025
Security leaders share their thoughts on the new EU vulnerability database.
19 May 2025
Serviceaide exposed a database containing personal and medical information belonging to Catholic Health patients.
The post 480,000 Catholic Health Patients Impacted by Serviceaide Data Leak appeared first on SecurityWeek.
19 May 2025
Continuous Threat Exposure Management (CTEM) has moved from concept to cornerstone, solidifying its role as a strategic enabler for CISOs. No longer a theoretical framework, CTEM now anchors today’s cybersecurity programs by continuously aligning security efforts with real-world risk.
At the heart of CTEM is the integration of Adversarial Exposure Validation (AEV), an advanced, offensive
19 May 2025
Mozilla has released security updates to address two critical security flaws in its Firefox browser that could be potentially exploited to access sensitive data or achieve code execution.
The vulnerabilities, both of which were exploited as a zero-day at Pwn2Own Berlin, are listed below -
CVE-2025-4918 - An out-of-bounds access vulnerability when resolving Promise objects that could allow an
19 May 2025
Neuromorphic computing is moving from theory to reality, with brain-inspired processors offering real-time intelligence, low power consumption, and built-in privacy—ushering in a new era for edge devices and cybersecurity.
The post Spiking Neural Networks: Brain-Inspired Chips That Could Keep Your Data Safe appeared first on SecurityWeek.
19 May 2025
Harbin Clinic says the information of over 200,000 patients was stolen in a July 2024 data breach at Nationwide Recovery Services.
The post 200,000 Harbin Clinic Patients Impacted by NRS Data Breach appeared first on SecurityWeek.
19 May 2025
Cybersecurity leaders aren’t just dealing with attacks—they’re also protecting trust, keeping systems running, and maintaining their organization’s reputation. This week’s developments highlight a bigger issue: as we rely more on digital tools, hidden weaknesses can quietly grow.
Just fixing problems isn’t enough anymore—resilience needs to be built into everything from the ground up.
19 May 2025
Eric Council Jr. was sentenced to prison for hacking SEC’s official X account and publishing fraudulent posts increasing Bitcoin value.
The post Prison Sentence for Man Involved in SEC X Account Hack appeared first on SecurityWeek.
19 May 2025
Pwn2Own participants demonstrated exploits against VMs, AI, browsers, servers, containers, and operating systems.
The post Hackers Earn Over $1 Million at Pwn2Own Berlin 2025 appeared first on SecurityWeek.