The Kyowon Group (Kyowon), a South Korean conglomerate, disclosed that a cyberattack has disrupted its operations and customer information may have been exposed in the incident. [...]
Microsoft and law enforcement partners took down a popular cybercriminal subscription service called RedVDS that was used to enable more than $40 million in fraud losses in the United States alone.
Cloud-native, 37 plugins … an attacker's dream A brand-new Linux malware named VoidLink targets victims' cloud infrastructure with more than 30 plugins that allow attackers to perform a range of illicit activities, from silent reconnaissance and credential theft to lateral movement and container abu...
ANCHOR will restart conversations between government and industry around critical infrastructure security, with some changes around liability and other areas.Â
The post Sources: DHS finalizing replacement for disbanded critical infrastructure security council appeared first on CyberScoop.
Exploit code has been published for CVE-2025-64155, a critical command injection vulnerability affecting Fortinet FortiSIEM devices.
Key takeaways:
CVE-2025-64155 is a critical operating system (OS) command injection vulnerability affecting Fortinet FortiSIEM.Â
Fortinet vulnerabilities have histor...
Popular vibe coding platforms consistently generate insecure code in response to common programming prompts, including creating vulnerabilities rated as ‘critical,’ new testing has found.
Security startup Tenzai’s top-line conclusion: the tools are good at avoiding security...
The botnet took an unusual path by abusing residential proxy networks, allowing it to control an untapped collection of unofficial Android TV devices.
The post Kimwolf botnet’s swift rise to 2M infected devices agitates security researchers appeared first on CyberScoop.
Session 8D: Usability Meets Privacy
Authors, Creators & Presenters: Andrick Adhikari (University of Denver), Sanchari Das (University of Denver), Rinku Dewri (University of Denver)
PAPER
PolicyPulse: Precision Semantic Role Extraction For Enhanced Privacy Policy Comprehension
The effectiveness...
The French data protection authority (CNIL) has imposed cumulative fines of €42 million on Free Mobile and its parent company, Free, for inadequate protection of customer data against cyber threats. [...]
California Attorney General Rob Bonta announced an investigation Wednesday into xAI over allegations that its artificial intelligence model Grok is being used to create nonconsensual sexually explicit images of women and children on a large scale, marking the latest escalation in regulatory efforts...
The near-total internet blackout imposed by the Iranian government starting January 8, reportedly due to a crackdown on protesters, may offer a rare opportunity to SOC staffers and other cybersecurity analysts, briefly allowing all government traffic sources to be identified a...
L'Autorité de Protection des Données Personnelles a publié une décision de sanction à l'encontre de l'État-major du Service de Protection Incendie, comprenant le prononcé d'une amende de 10 000 €, pour des manquements en lien avec le traitement de données de santé. Cette affaire débute par une plain...
L'autorité hellénique de protection des données a publié une décision adressant un avertissement à la Police hellénique (ΕΛ.ΑΣ.) pour des manquements en lien avec la mise en place d'un système de « Police Intelligente » impliquant le traitement de données biométriques. Cette affaire débute par une d...
AI agents are supposed to make work easier. But they’re also creating a whole new category of security nightmares. As companies deploy AI-powered chatbots, agents, and copilots across their operations, they’re facing a new risk: How do you let employees and AI agents use powerful AI tools without a...
L'Autorité hellénique de protection des données a publié une décision de sanction à l'encontre de la Société Publique d'Électricité S.A. (ΔΕΗ ΑΕ), comprenant le prononcé d'une amende de 30 000 €, pour des manquements en lien avec la gestion des demandes d'exercice de droits des personnes concernées....
CERT-UA reported PLUGGYAPE malware attacks on Ukraine’s defense forces, linked with medium confidence to Russia’s Void Blizzard group. The Computer Emergency Response Team of Ukraine (CERT-UA) reported new cyberattacks against Ukraine’s defense forces using PLUGGYAPE malware. Government experts attr...
Researchers have demonstrated remotely controlling a wheelchair over Bluetooth. CISA has issued an advisory.
CISA said the WHILL wheelchairs did not enforce authentication for Bluetooth connections, allowing an attacker who is in Bluetooth range of the targeted device to pair with it. The attacker c...
As far back as the early 1800s, the U.S. Department of the Treasury has issued economic sanctions to achieve foreign…
The post OFAC and Crypto Crime: Every OFAC Specially Designated National with Identified Cryptocurrency Addresses appeared first on Chainalysis.
The Black Lotus Labs team at Lumen Technologies said it null-routed traffic to more than 550 command-and-control (C2) nodes associated with the AISURU/Kimwolf botnet since early October 2025.
AISURU and its Android counterpart, Kimwolf, have emerged as some of the biggest botnets in recent times, ca...
A major Verizon outage appeared to impact customers across the United States starting around noon ET on Wednesday. Calls to Verizon customers from other carriers may also be impacted.