Security News

Australian fertility services giant Genea hit by security breach
2025-02-19 17:40

​Genea, one of Australia's largest fertility services providers, disclosed that unknown attackers breached its network and accessed data stored on compromised systems. [...]

Attackers are chaining flaws to breach Palo Alto Networks firewalls
2025-02-19 08:50

Exploitation attempts targeting CVE-2025-0108, a recently disclosed authentication bypass vulnerability affecting the management web interface of Palo Alto Networks’ firewalls, are ramping up....

Fintech giant Finastra notifies victims of October data breach
2025-02-18 15:01

Financial technology giant Finastra is notifying victims of a data breach after their personal information was stolen by unknown attackers who first breached its systems in October 2024. [...]

PostgreSQL flaw exploited as zero-day in BeyondTrust breach
2025-02-14 14:15

​Rapid7's vulnerability research team says attackers exploited a PostgreSQL security flaw as a zero-day to breach the network of privileged access management company BeyondTrust in December. [...]

Chinese hackers breach more US telecoms via unpatched Cisco routers
2025-02-14 12:56

China's Salt Typhoon hackers are still actively targeting telecoms worldwide and have breached more U.S. telecommunications providers via unpatched Cisco IOS XE network devices. [...]

Sarcoma ransomware claims breach at giant PCB maker Unimicron
2025-02-12 19:24

A relatively new ransomware operation named 'Sarcoma' has claimed responsibility for an attack against the Unimicron printed circuit boards (PCB) maker in Taiwan. [...]

HPE notifies employees of data breach after Russian Office 365 hack
2025-02-07 19:21

Hewlett Packard Enterprise (HPE) is notifying employees whose data was stolen from the company's Office 365 email environment by Russian state-sponsored hackers in a May 2023 cyberattack. [...]

Hackers exploit Cityworks RCE bug to breach Microsoft IIS servers
2025-02-07 18:42

Software vendor Trimble is warning that hackers are exploiting a Cityworks deserialization vulnerability to remotely execute commands on IIS servers and deploy Cobalt Strike beacons for initial...

US health system notifies 882,000 patients of August 2023 breach
2025-02-07 16:44

Hospital Sisters Health System notified over 882,000 patients that an August 2023 cyberattack led to a data breach that exposed their personal and health information. [...]

British engineering firm IMI discloses breach, shares no details
2025-02-06 14:36

British-based engineering firm IMI plc has disclosed a security breach after unknown attackers hacked into the company's systems. [...]