A nationwide outage of the GSM-R (Global System for Mobile Communications – Railway) network brought Germany’s extensive rail system to a standstill, affecting thousands of passengers and highlighting critical single points of failure in modern transportation infrastructure. The incident exposed how
The U.S. Department of Justice has seized a Huione Cloud account linked to a massive cyber scam money laundering network operating across Southeast Asia. The enforcement action targets financial infrastructure used by organized crime syndicates to process proceeds from pig butchering scams, romance
Japanese telecommunications giant KDDI Corporation disclosed a massive data exposure affecting 14.2 million email credentials from its managed email service. The breach resulted from a misconfigured cloud storage bucket that left authentication credentials publicly accessible on the internet. While
CISA has added a critical Ubiquiti UniFi OS vulnerability (CVE-2025-23093) to its Known Exploited Vulnerabilities catalog after detecting active exploitation in the wild. The flaw, affecting UniFi OS Console versions before 4.1.9, allows unauthenticated remote attackers to execute arbitrary commands
The White House has significantly accelerated the timeline for federal agencies to migrate away from quantum-vulnerable cryptographic systems, moving the deadline forward by several years. This urgent directive recognizes the imminent threat posed by quantum computing to current encryption standards
A critical use-after-free (UAF) vulnerability in Samsung KNOX’s kernel driver (CVE-2026-20971) affects millions of Galaxy devices, enabling local privilege escalation to kernel level. Attackers with ADB or malicious app access can exploit this flaw to bypass KNOX security containers, access encrypte
The Internet Society Foundation has launched the Common Good Cyber Fund, a $1 million grant program aimed at strengthening cybersecurity infrastructure and capacity in underserved regions worldwide. The initiative will support projects focused on defensive security, capacity building, and resilience
The Dropping Elephant threat actor group has evolved its tactics by abusing Windows’ legitimate GoogleErrorReport scheduled task to maintain persistent access on compromised systems. This sophisticated evasion technique allows the attackers to blend malicious activity with normal system processes, m
Cisco has confirmed active exploitation of CVE-2026-20230, a critical Server-Side Request Forgery (SSRF) vulnerability in Cisco Unified Communications Manager (Unified CM). The flaw allows unauthenticated attackers to perform arbitrary HTTP requests through vulnerable systems, potentially leading to
A sophisticated threat campaign dubbed “FortiBleed” has compromised approximately 430,000 FortiGate firewall devices worldwide, resulting in the exfiltration of over 110 million credentials. Attackers exploited previously disclosed vulnerabilities in Fortinet’s SSL-VPN implementation to harvest auth