Danish pharmaceutical giant Novo Nordisk confirmed a cyberattack resulting in data theft, though the company maintains that sensitive patient information and drug formulations were not compromised. The breach targeted corporate systems and involved the exfiltration of business-related data. As the w
A sophisticated malvertising campaign dubbed “SearchJack” has compromised 758,000 Chrome browser users by deploying 23 malicious extensions that hijack search queries and redirect traffic for profit. The extensions, which masqueraded as legitimate productivity and utility tools, intercepted user sea
The Federal Communications Commission (FCC) has proposed new regulations that would effectively eliminate anonymous phone ownership in the United States by requiring identity verification for all mobile device activations. The proposal mandates carriers to collect and verify government-issued identi
A critical vulnerability in Wazuh, the popular open-source security monitoring platform, allows authenticated attackers to manipulate security alerts and permanently delete forensic evidence. The flaw undermines the integrity of security operations by enabling threat actors to cover their tracks aft
Attackers are reviving the Evil MSI (Microsoft Installer) technique, leveraging BASE64 encoding and statistical obfuscation to bypass detection mechanisms. This campaign exploits Windows Installer’s legitimate functionality to execute malicious payloads while evading traditional signature-based secu
A sophisticated Chinese APT group maintained unprecedented access to a target organization’s authentication infrastructure for ten years, allowing them to compromise an air-gapped network through hijacked authentication flows. The attackers embedded themselves so deeply within the identity and acces
A critical pre-authentication remote code execution (RCE) vulnerability chain has been discovered in Splunk Enterprise, allowing unauthenticated attackers to compromise systems and access sensitive database information. The exploit chain bypasses authentication mechanisms entirely, providing attacke
Russian state-sponsored threat actor Fancy Bear (APT28) has been leveraging compromised Ubiquiti EdgeRouters and cloud infrastructure to conduct sophisticated, low-profile cyberattacks against high-value targets. The group exploits legacy router firmware vulnerabilities and misconfigured devices to
Sports organizations are deploying advanced surveillance systems including cameras, sensors, and 3D body scanning technology to create digital twin models of athletes. While designed to improve officiating accuracy and performance analytics, these systems collect highly sensitive biometric data that
Microsoft has addressed a critical vulnerability in Surface devices that allowed attackers to permanently brick hardware using a single malicious network packet. The flaw, affecting multiple Surface product lines, could render devices completely inoperable without physical intervention. While Micros