Aggregator

Leaked Financial and Admissions Data Includes Contact Details for 'Top Donors'
Harvard University has been named as a victim and doxed by hack-and-leak group ShinyHunters, apparently as a result of the cybercrime group's ongoing "live phishing" attacks that often attempt to trick IT help desks into giving attackers direct access to a victim's network and cloud-based data.

Acquisition Adds Okta and Ping Coverage to Semperis' Identity Security Platform
Semperis has acquired MightyID to extend its identity-first security and cyber resilience strategy beyond Active Directory and Entra ID into Okta and Ping. CEO Mickey Bresman says the deal addresses customer demand for multi-identity provider protection backup recovery and migration.

Southern Connecticut State University CIO Tom Armstrong on Modernization Priorities
Like other schools, Southern Connecticut State University is under pressure to modernize legacy systems, strengthen security and adopt AI. CIO Tom Armstrong must balance expanding research ambitions, student expectations and operational efficiency in an increasingly complex risk environment.

Funding at $1B Valuation Targets AI-Driven Investigations and Compliance Tools
TRM Labs has secured $70 million in Series C funding led by Blockchain Capital reaching a $1 billion valuation. CEO Esteban Castano says the money will boost AI-powered investigations, compliance automation and intelligence as criminals use AI to scale cybercrime faster than defenders can respond.

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. 

• CVE-2025-11953 React Native Community CLI OS Command Injection Vulnerability
• CVE-2026-24423 SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. 

Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information. 

Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.

Attackers are leaning on a new EDR killer malware that can shut down 59 widely used endpoint security products by misusing a kernel driver that once shipped with Guidance Software’s EnCase digital forensics tool, Huntress researchers warn. This particular driver is legitimate but its certificate expired and was revoked more than ten years ago. Even so, Windows still allows it to load. The attack Huntress’ security experts spotted this intrusion earlier this month, and discovered … More →

The post Why a decade-old EnCase driver still works as an EDR killer appeared first on Help Net Security.

Actions by authorities from Italy, Romania, Spain, the United Kingdom, Canada, Kosovo and South Korea, supported by Eurojust and Europol, led to the seizure of multiple illegal streaming services. A total of 31 suspected members have been linked to the operation. The group engaged in unauthorised distribution of pay TV content, illegal access to information technology systems, computer fraud and money laundering. The activity expanded as revenue increased, enabling the distribution of illegal streaming services … More →

The post International sting dismantles illegal streaming empire serving millions appeared first on Help Net Security.

Researchers at Check Point link ‘Amarath-Dragon’ attacks to prolific Chinese cyber-espionage operation

A vulnerability was found in Chapa Payment Gateway Plugin for WooCommerce Plugin up to 1.0.3 on WordPress. It has been rated as problematic. This affects the function chapa_proceed of the component API Endpoint. The manipulation leads to information disclosure. This vulnerability is referenced as CVE-2025-15482. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability categorized as critical has been discovered in MyRewards Plugin up to 5.6.0 on WordPress. This vulnerability affects the function ajax. The manipulation results in missing authorization. This vulnerability is identified as CVE-2025-15260. The attack can be executed remotely. There is not any exploit available.

A vulnerability identified as problematic has been detected in Magic Import Document Extractor Plugin up to 1.0.4 on WordPress. This issue affects the function get_frontend_settings. This manipulation causes information disclosure. This vulnerability is tracked as CVE-2025-15508. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability labeled as problematic has been found in Fortis for WooCommerce Plugin up to 1.2.0 on WordPress. Impacted is the function check_fortis_notify_response of the component Order Status Update Handler. Such manipulation leads to missing authorization. This vulnerability is listed as CVE-2026-0679. The attack may be performed from remote. There is no available exploit.

A vulnerability described as critical has been identified in Michael Lups SEO Flow by LupsOnline Plugin up to 2.2.1 on WordPress. The impacted element is the function checkBlogAuthentication. Executing a manipulation can lead to improper authentication. This vulnerability is registered as CVE-2025-15285. It is possible to launch the attack remotely. No exploit is available.

A vulnerability categorized as critical has been discovered in Infility Global Plugin up to 2.14.46 on WordPress. The affected element is the function infility_get_data of the component Server Configuration Handler. Such manipulation leads to sql injection. This vulnerability is referenced as CVE-2025-15268. It is possible to launch the attack remotely. No exploit is available.

A vulnerability identified as critical has been detected in Magic Import Document Extractor Plugin up to 1.0.4 on WordPress. The impacted element is the function ajax_sync_usage. Performing a manipulation results in missing authorization. This vulnerability is identified as CVE-2025-15507. The attack can be initiated remotely. There is not any exploit available.

A vulnerability labeled as problematic has been found in WebPurify Profanity Filter Plugin up to 4.0.2 on WordPress. This affects the function webpurify_save_options of the component Setting Handler. Executing a manipulation can lead to missing authorization. This vulnerability is tracked as CVE-2026-0572. The attack can be launched remotely. No exploit exists.

A vulnerability marked as critical has been reported in Code Explorer Plugin up to 1.4.6 on WordPress. This impacts an unknown function. The manipulation of the argument File leads to path traversal. This vulnerability is listed as CVE-2025-15487. The attack may be initiated remotely. There is no available exploit.

A vulnerability classified as problematic has been found in Extended Random Number Generator Plugin up to 1.1 on WordPress. Affected by this vulnerability is an unknown functionality of the component Setting Handler. This manipulation causes cross site scripting. This vulnerability is registered as CVE-2026-0681. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability classified as problematic was found in Smart Appointment & Booking Plugin up to 1.0.7 on WordPress. Affected by this issue is the function saab_save_form_data. Such manipulation leads to cross site scripting. This vulnerability is documented as CVE-2026-0742. The attack can be executed remotely. There is not any exploit available.

Google и OpenAI пытаются решить задачи, которые пока не под силу ни одному алгоритму.