News

Sat 19 Jul 2025· 16 articles

1. 17:56

   Government will ‘robustly defend’ compensation claims from Afghans put at risk by data breach

   So after putting their lives at risk, the UK’s Ministry of Defence will firmly resist giving anyone even a pence for what they have gone through? Lettice Bromovsky reports: Thousands of Afghans included on a list of people trying to flee the Taliban are…

   DataBreachesOriginal report
2. 17:47

   Authorities released free decryptor for Phobos and 8base ransomware

   Pierluigi Paganini reports: Japanese authorities released a free decryptor for Phobos and 8Base ransomware, allowing victims to recover files without paying. Japanese police released the free decryptor for ransomware families, which was likely built using…

   DataBreachesOriginal report
3. 17:41

   Threat actors downgrade FIDO2 MFA auth in PoisonSeed phishing attack

   A PoisonSeed phishing campaign is bypassing FIDO2 security key protections by abusing the cross-device sign-in feature in WebAuthn to trick users into approving login authentication requests from fake company portals. [...]

   BleepingComputerOriginal report
4. 16:25

   Fortinet FortiWeb flaw CVE-2025-25257 exploited hours after PoC release

   Hackers exploited a Fortinet FortiWeb flaw the same day a PoC was published, compromising dozens of systems. Hackers began exploiting a critical Fortinet FortiWeb flaw, tracked as CVE-2025-25257 (CVSS score of 9.6), on the same day a proof-of-concept (PoC)…

   Security AffairsOriginal report
5. 14:59

   Singapore Facing ‘Serious’ Cyberattack by Espionage Group With Alleged China Ties

   Singapore said Friday it was responding to a major cyberattack on its critical infrastructure carried out by an espionage group that security experts allege is linked to China. The Chinese embassy in Singapore described the allegations as “unwarranted…

   DataBreachesOriginal report
6. 12:51

   Popular npm linter packages hijacked via phishing to drop malware

   Popular JavaScript libraries eslint-config-prettier and eslint-plugin-prettier were hijacked this week and turned into malware droppers, in a supply chain attack achieved via targeted phishing and credential theft. [...]

   BleepingComputerOriginal report
7. 12:07

   ChatGPT"s GPT-5-reasoning-alpha model spotted ahead of launch

   GPT-5 might be just a few days or weeks away, as we've spotted references to a new model called gpt-5-reasoning-alpha-2025-07-13. [...]

   BleepingComputerOriginal report
8. 06:30

   OpenAI, Anthropic, Google may disrupt education market with new AI tools

   AI companies could soon disrupt the education market with their new AI-based learning tools for students. [...]

   BleepingComputerOriginal report
9. 02:42

   Microsoft Pulls the Plug on Movies & TV Store: End of an Entertainment Era

   SecurityOnlineOriginal report
10. 02:38

    Major npm Supply Chain Attack: Phishing Campaign Steals Maintainer Credentials, Injects Malware into Popular Packages

    SecurityOnlineOriginal report
11. 02:06

    FortiWeb SQL Injection (CVE-2025-25257) Added to CISA KEV After Active Exploitation, PoC Available!

    SecurityOnlineOriginal report
12. 01:50

    CVE-2025-54309: CrushFTP Targeted in Active Exploits Due to Unpatched Zero-Day Vulnerability

    SecurityOnlineOriginal report
13. 00:11

    CVE-2025-4660 (CVSS 8.7) in Forescout SecureConnector Allows Remote Endpoint Hijack, PoC Publishes

    SecurityOnlineOriginal report
14. 00:06

    KAWA4096: New Ransomware Blends Qilin & Akira Tactics, Hits US and Japan

    SecurityOnlineOriginal report
15. 00:03

    Missouri Adopts New Data Breach Notice Law

    J. Randall Coffey, Daniel Pepper, and Jillian Seifrit of Fisher Phillips write: On July 2, Missouri’s Governor approved House Bill 974, “The Insurance Data Security Act,” which will establish standards for insurers and licensed entities regarding data…

    DataBreachesOriginal report
16. 00:01

    Nvidia Flaws Expose Jetson AI & Robotics Platforms to RCE and Data Theft

    SecurityOnlineOriginal report