53 article(s) in our index mention this organisation.
This Patch Tuesday, Siemens released 17 security advisories addressing vulnerabilities in its industrial automation products, including Simatic S7-1500 CPUs, Ruggedcom devices, and various Simatic WinCC products. CISA an…
The FBI is investigating a suspected breach by ShinyHunters, a cybercrime group, after the group claimed to have obtained data from the FBI and defaced its website. A suspected ShinyHunters operative was detained in Jord…
Monta monta.app versions are vulnerable to WebSocket authentication flaws, allowing attackers to gain unauthorized access to charging stations and potentially disrupt services through denial-of-service attacks. Monta is…
The Pentagon is taking steps to address the mental and emotional well-being of its cyber forces, following a cluster of suicides within U.S. Cyber Command. The initiative is part of a broader effort to understand and mit…
A dental contractor exploited their access to a company’s systems to create a secret account and steal records of approximately 4,000 patient files. This incident highlights a concerning trend of insider threats and the…
This Smashing Security podcast episode explores how companies are avoiding discussing cyberattacks with generic PR statements, and how the silence surrounding these events can actually be used to track attackers online.…
The US military has disabled ad tracking on government-issued phones and computers following concerns about adversaries exploiting commercially available location data to target personnel in the Middle East. Senator Ron…
Two arrests in France have linked the investigation into the ZeroBytes hacking group to the older Epsilon hacking group and a complex web of aliases. ChatNoir, a key figure in the arrests, was involved in ZeroBytes activ…
This episode of Smashing Security explores how AI is being used to facilitate iPhone theft, highlighting the growing risk of device theft around major product launches like Apple's new iPhones. The host recounts a person…
Aesto, a healthcare data company, suffered a cyberattack that exposed the sensitive health information of over 9.5 million people. The breach involved stolen data including names, Social Security numbers, and medical rec…
A federal judge ruled against the Pentagon, stating that the government’s designation of Anthropic as a supply chain risk was illegal and based on a desire to punish the AI company for criticizing its views on AI use in…
A purported leak is claiming that the Dominican Republic’s electoral authority, the Junta Central Electoral (JCE), has been compromised, with 7.1 million citizen records and nearly 5.8 million IDs potentially exposed. A…
Alice, a cybersecurity firm specializing in AI safety, has raised $140 million to bolster its defenses against vulnerabilities and attacks targeting generative AI models. The company uses a decade-long database of harmfu…
A new research report from Nozomi Networks (acquired by Mitsubishi Electric) highlights a significant vulnerability within Time-Sensitive Networking (TSN) protocols, specifically CC-Link IE TSN, a widely deployed industr…
A U.S. government advisory warns of an active threat targeting critical infrastructure organizations, specifically Siemens S7 PLCs, utilizing AI-generated exploit scripts. Threat actors are leveraging internet scanning t…
Atalanta has developed ‘Argo,’ an AI-assisted tool designed to proactively identify vulnerabilities in software and internet-connected systems, specifically to bolster defenses against ongoing cyber threats from Russia a…
This podcast episode centers around a social engineering attempt targeting the new Prime Minister of the UK, Andy Burnham, with a fabricated call from the Trump administration. The discussion then shifts to Black Hat 202…
A threat actor, known as ‘TheHatman’, is selling massive amounts of stolen data allegedly extracted from Azure tenants belonging to several Fortune 500 companies, including McDonald’s, Vodafone, and Wyndham Hotels. The d…
Several major industrial automation vendors – Siemens, Schneider Electric, and Phoenix Contact – released security patches to address critical vulnerabilities in their ICS products. These flaws could allow attackers to e…
A 26-year-old man, Connor Riley Moucka, has pleaded guilty to his role in a coordinated cybercrime campaign targeting Snowflake accounts and stealing sensitive data from over 165 organizations. The campaign, linked to th…
