News

Sun 9 Mar 2025· 12 articles

1. 23:15

   Endless Mountains Health Systems affected by cyberattack; patients alerted to situation

   Endless Mountains Health Systems (EMHS) in Pennsylvania has been dealing with a cyberattack that has impacted its operations and some of its systems. They have not stated whether it is a ransomware incident or not. EMHS announced the attack on March 5 on its…

   DataBreachesOriginal report
2. 15:48

   Akira ransomware gang used an unsecured webcam to bypass EDR

   The Akira ransomware gang exploited an unsecured webcam to bypass EDR and launch encryption attacks on a victim’s network. Pierluigi Paganini reports: Cybersecurity researchers at S-RM team discovered a novel attack technique used by the Akira ransomware…

   DataBreachesOriginal report
3. 15:20

   US cities warn of wave of unpaid parking phishing texts

   US cities are warning of an ongoing mobile phishing campaign pretending to be texts from the city's parking violation departments about unpaid parking invoices, that if unpaid, will incur an additional $35 fine per day. [...]

   BleepingComputerOriginal report
4. 14:55

   Undocumented hidden feature found in Espressif ESP32 microchip

   Experts discovered an undocumented hidden feature in the ESP32 microchip manufactured by Espressif, which is used in over 1 billion devices. At the RootedCON, researchers at Tarlogic Innovation presented their findings on undocumented commands in the ESP32…

   Security AffairsOriginal report
5. 14:14

   New Chirp tool uses audio tones to transfer data between devices

   A new open-source tool named 'Chirp' transmits data, such as text messages, between computers (and smartphones) through different audio tones. [...]

   BleepingComputerOriginal report
6. 11:35

   SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 36

   Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. Cellebrite zero-day exploit used to target phone of Serbian student activist One in Four Cyberattacks in 2024 Traced...

   Security AffairsOriginal report
7. 09:15

   Popular Python Logging Library Vulnerable to Remote Code Execution (CVE-2025-27607)

   A critical vulnerability has been discovered in ‘python-json-logger’, a popular Python library used for generating JSON logs. This

   SecurityOnlineOriginal report
8. 09:14

   LastPass: Your Digital Life, Secured and Simplified (Review & Recommendation)

   In today’s digital age, we’re drowning in passwords. From banking and email to social media and streaming services,

   SecurityOnlineOriginal report
9. 01:56

   CVE-2024-50394: QNAP Helpdesk Vulnerability Could Allow Remote System Compromise

   QNAP has issued a security advisory regarding an improper certificate validation vulnerability in its Helpdesk app. The vulnerability,

   SecurityOnlineOriginal report
10. 01:54

    Smartwares Security Breach: Vulnerabilities Expose Cameras to Remote Takeover

    CERT Polska, operating within the National Research Institute (NASK), has unveiled security vulnerabilities affecting Smartwares CIP-37210AT and C724IP

    SecurityOnlineOriginal report
11. 01:01

    Cybercriminals Exploit DeepSeek’s Popularity to Distribute Trojanized AI Clients

    With the rapid growth of AI-driven platforms, cybercriminals have wasted no time in exploiting the popularity of DeepSeek,

    SecurityOnlineOriginal report
12. 00:52

    Security Affairs newsletter Round 514 by Pierluigi Paganini – INTERNATIONAL EDITION

    A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Akira…

    Security AffairsOriginal report