Siemens Software Center Exploit Uncovered in Malware Campaign
Attackers used genuine Siemens Software Center paired with malicious DLLs to infect Windows PCs via ClickFix lures.
Wednesday, October 21
FBI Probes Cybersecurity Executive's Alleged Role in ShinyHunters Extortion Scheme
FBI investigators suspect a cybersecurity executive assisted ShinyHunters by helping operate an extortion website used to pressure victims.
California Public School Students' Data Exposed in Contractor Breach
California notifies public school students after assessment contractor ETS suffered months-long data breach exposing student data.
Hacker Sentenced to Eight Years for $3.3 Million Taxpayer Theft
Court sentences attacker to eight years for spearphishing tax preparation businesses and stealing $3.3 million.
Critical Flaw in Broadcom Wi-Fi Allows Remote Code Execution on Routers
Broadcom Wi-Fi setup flaw enables attackers within radio range to run root code on Broadcom-based routers without passwords.
Revolut Outage Causes Global Disruption in Online Banking
Fintech Revolut experienced a widespread outage disrupting online banking services globally.
Paradigm Healthcare Data Breach Exposes Nearly One Million Medi-Cal Members
Paradigm Healthcare breach exposed personal data of 970,000 Medi-Cal members after October 2025 intrusion.
Fake Web3 Accelerator Uses npm Packages to Spread Malware and Compromise AI Traffic
Malicious npm packages from fake Web3 accelerator deliver info-stealers and backdoors and hijack AI agent traffic.
Android Phones with Preinstalled Malware Threaten Global Security
Midnight Mimosa firmware malware found on thousands of low-cost Android phones, giving attackers persistent system access.
Pegasus Spyware Targets Serbian University Rector Amid Political Tensions
Citizen Lab confirms Pegasus zero-click spyware infected Serbian rector's iPhone shortly before elections.
SafePay Ransomware Group Strikes Over 600 Organizations, FBI Warns
FBI warns SafePay gang has over 600 victims since 2024 using password guessing, vulnerability exploits, and phishing.
Russian-Linked Cyber Espionage Targets NATO Defense Contractors
Russia-linked APT28 used a backdoor to dwell in NATO contractors and a law enforcement agency, exfiltrating data.
German Authorities Arrest Qilin Ransomware Suspect Linked to Fatal Hospital Cyber Attack
German police arrested a suspected Qilin gang member linked to Synnovis attack that disrupted hospitals and contributed to a patient death.
OVHcloud CLI Downloads Compromised by Malware Attack
Attackers replaced five OVHcloud CLI release downloads on GitHub with builds that steal developer secrets from disk.
AI Platform Exploited for Global Cyberattacks on Over 100 Firms
Threat actors abused AI platform Cairn to gain persistent access and conduct financial theft across 100+ organizations.
OpenCode Console Security Breach Exposes API Keys
OpenCode Console intrusion may have leaked OpenAI, Anthropic, and Google API keys stored in legacy systems.
Cyberattack on Ahold Delhaize Disrupts Online Services Across Continents
Ahold Delhaize confirms malicious actions caused major outages impacting stores and e-commerce across US and Europe.
ConnectWise Cloud Backup Breach Puts MSPs and Clients at Risk
ConnectWise suspends Cloud Backup after theft of API/M365 tokens; downstream MSPs and tenants at risk of unauthorized access.
eMudhra CA Key Breach Prompts Urgent Security Measures Across Browsers
Major vendors block eight compromised eMudhra intermediate CA keys, prompting emergency updates across browsers and platforms.
Monday, October 19
Get these articles delivered to your inbox.
Subscribe free