2+ week, 3+ day ago   (671+ words) Foreign intelligence services were linked to 37% of attacks on German companies as businesses struggled to confirm intrusions and identify attackers. Germany’s businesses are losing billions to cyberattacks and espionage, and are becoming less certain about who is behind them, creating…...

2+ week, 4+ day ago   (499+ words) ASOS says attackers used credentials stolen elsewhere to access customer accounts, exposing personal data belonging to an estimated 138,828 people. ASOS says attackers used login credentials obtained outside the company to access customer accounts, exposing personal information belonging to an estimated…...

3+ week, 6+ day ago   (458+ words) Philips and GE are investigating Clop data theft claims potentially linked to a PTC vulnerability. Philips and General Electric (GE) are investigating incidents after the Clop ransomware group claimed to have stolen data from both companies. The companies are among…...

3+ day, 2+ hour ago   (695+ words) Researchers have uncovered a fake-shopping network spanning more than 119,000 domains. German cybersecurity company Nebty identified the operation, dubbed DoppelCart, which imitates legitimate retailers by copying their branding, product catalogs, descriptions, and images. The fake checkout pages can capture card numbers,…...

1+ week, 6+ day ago   (945+ words) Scammers are using fake Indeed interview apps to infect Android phones with spyware. Learn how the attack works and how job seekers can avoid it. Scammers are turning Indeed’s trusted name into a malware delivery vehicle, and the bait is…...

1+ week, 5+ day ago   (695+ words) China-linked Fire Ant hackers compromised Cisco IOS XR routers, management hosts, and authentication systems to create covert paths into other networks. Compromising a server can expose one machine. Compromising the right router can give attackers visibility into an entire network....

1+ week, 2+ day ago   (587+ words) PaperCut pre-authentication RCE: A PaperCut remote code execution flaw is being exploited in the wild, with Huntress observing attacks against two customers. PaperCut considers all NG and MF versions potentially affected. Organizations should update PaperCut immediately, remove public access, preserve…...

2+ week, 3+ day ago   (575+ words) CISA says hackers targeted more than 100 internet-exposed U.S. water systems in July, exploiting PLC access and causing some operational disruptions. America’s water utilities faced a concentrated wave of cyberattacks in July, with exposed industrial control systems providing attackers a direct path…...

5+ day, 10+ hour ago   (404+ words) Fake Minecraft sites continue distributing WeedHack malware through SEO poisoning and trusted hosting platforms despite disruption of its original C2 infrastructure. Disrupting WeedHack’s command-and-control infrastructure did not stop its distribution. Fake Minecraft client sites and trusted hosting services continued serving the…...

3+ week, 3+ day ago   (486+ words) T-Mobile physically cut a network cable to disrupt Salt Typhoon’s access. T-Mobile’s cybersecurity team reportedly turned to an unusually simple containment measure during its fight against the Chinese state-backed Salt Typhoon hacking group. The team physically cut a network cable…...