News

Thu 28 Aug 2025· 93 articles

1. 02:01

   A Strategic Pivot: Alphabet’s Verily Shuts Down Its Medical Devices Division to Focus on AI

   Alphabet’s life sciences arm Verily is shutting down its medical devices division and laying off staff, with the number affected undisclosed. The move, announced as part of a broader strategic pivot to artificial intelligence and data infrastructure, sees…

   SecurityOnline
   
2. 01:55

   Beyond Lobbying: Meta Creates a Super PAC to Shape AI Policy in California

   Meta is reportedly preparing to establish a new Super Political Action Committee (Super PAC) named “Mobilizing Economic Transformation Across (META) California,” aimed at shaping California’s local political landscape to favour policies supportive of the…

   SecurityOnline
   
3. 01:52

   Samsung to Unveil Galaxy S25 FE with Premium Features at IFA 2024

   Samsung has officially announced that it will host a Galaxy launch event on 4 September 2024 at 11:30 a.m. CET during IFA 2024 in Berlin, where it is expected to unveil the Galaxy S25 FE, with teasers signalling additional product announcements. The S25 FE…

   SecurityOnline
   
4. 01:48

   A Landmark Deal: Anthropic Settles Class-Action Lawsuit with Authors Over AI Training

   Anthropic has announced a class-action settlement with authors over the alleged unauthorized use of their works for AI model training, a move described by Justin Nelson, attorney for the authors, as “a historic settlement that will benefit all members of the…

   SecurityOnline
   
5. 00:40

   NVIDIA Issues Security Update for NeMo Framework: Multiple High-Severity Vulnerabilities Patched

   NVIDIA has released a security update for its NeMo Framework addressing multiple high-severity vulnerabilities that could allow attackers to execute arbitrary code, escalate privileges, steal sensitive information, and tamper with data. The four issues are…

   SecurityOnline
   
6. 00:30

   Festival of Fraud: How Scammers Exploit Ganesh Chaturthi for Cybercrime

   As Ganesh Chaturthi approaches, CloudSEK notes that cybercriminals exploit the festival’s heightened emotions, generosity, and online activity to mount fraud campaigns targeting devotees across India, with scams spiking during major celebrations. According…

   SecurityOnline
   
7. 00:27

   PoC Available: CrushFTP Zero-Day (CVE-2025-54309) Exploited in the Wild

   CrushFTP has a zero-day authentication bypass vulnerability, CVE-2025-54309, that has already been exploited in the wild and enables remote attackers to gain full administrative control via a race condition in HTTP request handling. watchTowr Labs’ analysis…

   SecurityOnline
   
8. 00:25

   Infrawatch Uncovers Belarusian-Run Residential Proxy Network Inside U.S. Homes

   Infrawatch, in collaboration with KrebsOnSecurity, has revealed that a Belarusian national is covertly operating a distributed residential proxy network across U.S. infrastructure, using hardware deployed in at least 20 states and more than 300 active…

   SecurityOnline
   
9. 00:21

   A Persistent Threat: Blind Eagle Hacking Group Continues to Target Colombia

   According to Insikt Group, TAG-144, also known as Blind Eagle, AguilaCiega, APT-C-36, or APT-Q-98, has five distinct activity clusters that have operated at various times across 2024 and 2025, continuing to target Colombian government institutions at local,…

   SecurityOnlineAPT-C-36
   
10. 00:16

    A Deceptive App Is Stealing Data from Indonesian Civil Servants and Retirees

    CloudSEK researchers have identified a highly targeted mobile malware campaign in Indonesia aimed at stealing financial and personal data from civil servants and pensioners, with attackers impersonating PT Dana Tabungan dan Asuransi Pegawai Negeri (Persero),…

    SecurityOnline
    
11. 00:10

    Data Theft Alert: Salesforce Instances Breached via Third-Party App OAuth Tokens

    The Google Threat Intelligence Group (GTIG) has issued an urgent advisory attributing the campaign to UNC6395, which targeted Salesforce environments via compromised OAuth tokens linked to the Salesloft Drift third‑party application. According to GTIG,…

    SecurityOnline
    
12. 00:05

    A Silent Threat: How a Stealthy Campaign Is Stealing ScreenConnect Credentials for Ransomware

    The Mimecast Threat Research team, led by Samantha Clarke, has exposed an ongoing credential harvesting campaign designated MCTO3030 that has quietly targeted ScreenConnect cloud administrators since 2022, with strong indications that compromised credentials…

    SecurityOnline
    
13. 00:00

    The Reversed Phishing Attack: New Campaign Triggers Victims to Call Hackers

    Check Point Research has exposed a new phishing campaign dubbed ZipLine that upends the usual social engineering order by prompting victims to initiate contact with the attacker. The campaign targets supply chain–critical manufacturing companies, delivering…

    SecurityOnline