Checkmarx: Ongoing Supply Chain Attack Targets Security Tools, Exposes Sensitive Data
Checkmarx confirms data exposure linked to a supply chain attack, with Lapsus$ claiming responsibility for the breach.
Tag Cybersecurity
ADT Confirms Cyber Intrusion Amid Extortion Attempt by ShinyHunters
ADT has acknowledged a cyber intrusion linked to the ShinyHunters group, which claims to have stolen over 10 million records, raising questions about data security and corporate response.
Telecommunications Fraud Campaign Exploits Fake CAPTCHA Techniques
A new report reveals a telecommunications fraud scheme utilizing fake CAPTCHA prompts to deceive users into incurring SMS charges, impacting individuals and telecom providers globally.
Discovery of Pre-Stuxnet Malware Fast16 Highlights Early Cyber Sabotage Efforts
Researchers have uncovered a previously undocumented malware, fast16, that predates Stuxnet and targets engineering software, raising questions about early cyber sabotage capabilities.
Tropic Trooper Leverages Trojanized Software for Targeted Cyber Attacks
A new campaign attributed to the Tropic Trooper group employs a compromised version of SumatraPDF to deploy malware targeting Chinese-speaking individuals.
UNC6692 Exploits Microsoft Teams for Malware Deployment
A threat group known as UNC6692 has been observed using social engineering tactics via Microsoft Teams to deploy malware, targeting senior employees and leveraging impersonation techniques.
SystemBC C2 Server Exposes Over 1,570 Victims Linked to The Gentlemen Ransomware
Recent research has uncovered a significant botnet associated with The Gentlemen ransomware operation, revealing over 1,570 compromised victims worldwide due to the deployment of SystemBC malware.
Stellantis and Microsoft Collaborate to Enhance Automotive AI Capabilities
Stellantis has partnered with Microsoft to integrate AI into its vehicles, aiming to improve digital services, cybersecurity, and engineering efficiency over the next five years.
Critical nginx-ui Vulnerability (CVE-2026-33032) Under Active Exploitation
A serious security flaw in nginx-ui, an open-source management tool for Nginx, has been disclosed and is currently being exploited. This vulnerability allows attackers to take control of Nginx servers without authentication.
New Exploit Discovered in Windows 11’s Recall Feature
A new method to access data from Windows 11's Recall feature has been unveiled, raising concerns about data security despite Microsoft's reassurances.
