Security News

EncryptHub linked to MMC zero-day attacks on Windows systems
2025-03-25 16:51

A threat actor known as EncryptHub has been linked to Windows zero-day attacks exploiting a Microsoft Management Console vulnerability patched this month. [...]

OT systems are strategic targets in global power struggles
2025-03-25 06:00

Compared to 2023, 2024 saw a smaller increase in cyberattacks that caused physical consequences on OT organizations, according to Waterfall Security. Nevertheless, there were sharp jumps in the...

New VanHelsing ransomware targets Windows, ARM, ESXi systems
2025-03-24 19:43

A new multi-platform ransomware-as-a-service (RaaS) operation named VanHelsing has emerged, targeting Windows, Linux, BSD, ARM, and ESXi systems. [...]

Veeam and IBM Release Patches for High-Risk Flaws in Backup and AIX Systems
2025-03-20 13:43

Veeam has released security updates to address a critical security flaw impacting its Backup & Replication software that could lead to remote code execution. The vulnerability, tracked as...

Critical mySCADA myPRO Flaws Could Let Attackers Take Over Industrial Control Systems
2025-03-19 06:59

Cybersecurity researchers have disclosed details of two critical flaws impacting mySCADA myPRO, a Supervisory Control and Data Acquisition (SCADA) system used in operational technology (OT)...

Developer guilty of using kill switch to sabotage employer's systems
2025-03-08 17:43

A software developer has been found guilty of sabotaging his ex-employer's systems by running custom malware and installing a "kill switch" after being demoted at the company. [...]

Seven Malicious Go Packages Found Deploying Malware on Linux and macOS Systems
2025-03-05 07:07

Cybersecurity researchers are alerting of an ongoing malicious campaign targeting the Go ecosystem with typosquatted modules that are designed to deploy loader malware on Linux and Apple macOS...

Over 49,000 misconfigured building access systems exposed online
2025-02-27 18:00

Researchers discovered 49,000 misconfigured and exposed Access Management Systems (AMS) across multiple industries and countries, which could compromise privacy and physical security in critical...

New Linux Malware ‘Auto-Color’ Grants Hackers Full Remote Access to Compromised Systems
2025-02-26 11:04

Universities and government organizations in North America and Asia have been targeted by a previously undocumented Linux malware called Auto-Color between November and December 2024, according to...

Malware variants that target operational tech systems are very rare – but 2 were found last year
2025-02-25 11:00

Fuxnet and FrostyGoop were both used in the Russia-Ukraine war Two new malware variants specifically designed to disrupt critical industrial processes were set loose on operational technology...