Aggregator

China-linked UnsolicitedBooker APT used new backdoor MarsSnake in recent attacks

Security Affairs
6 months 3 weeks ago
China-linked UnsolicitedBooker used a new backdoor, MarsSnake, to target an international organization in Saudi Arabia. ESET researchers revealed that a China-linked APT, tracked as UnsolicitedBooker, targeted an international organization in Saudi Arabia using a new backdoor called MarsSnake. The experts uncovered the attacks in March 2023 and again in 2024, noting that the group used […]
Pierluigi Paganini

AWS Default IAM Roles Found to Enable Lateral Movement and Cross-Service Exploitation

The Hackers News
6 months 3 weeks ago
Cybersecurity researchers have discovered risky default identity and access management (IAM) roles impacting Amazon Web Services that could open the door for attackers to escalate privileges, manipulate other AWS services, and, in some cases, even fully compromise AWS accounts. "These roles, often created automatically or recommended during setup, grant overly broad permissions, such as full S3
The Hacker News

Cyberattack on Serviceaide Compromises Data of 480,000 Catholic Health Patients

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
6 months 3 weeks ago

Data breach at Serviceaide, Inc., a technology vendor for Catholic Health, exposed sensitive information belonging to approximately 480,000 patients. The incident, caused by an improperly secured Elasticsearch database, left names, Social Security numbers, medical records, and login credentials publicly accessible for nearly seven weeks. While forensic analysts found no direct evidence of data misuse, the […]

The post Cyberattack on Serviceaide Compromises Data of 480,000 Catholic Health Patients appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Mayura Kathir

Red Hat Enterprise Linux 10 helps mitigate future quantum-based threats

Help Net Security
6 months 3 weeks ago

Red Hat Enterprise Linux 10 provides a strategic and intelligent backbone for enterprise IT to navigate complexity, accelerate innovation and build a more secure computing foundation for the future. As enterprise IT grapples with the proliferation of hybrid environments and the imperative to integrate AI workloads, the need for an intelligent, resilient and durable operating system has never been greater. Red Hat Enterprise Linux 10 rises to this challenge, delivering a platform engineered for agility, … More →

The post Red Hat Enterprise Linux 10 helps mitigate future quantum-based threats appeared first on Help Net Security.

Industry News

Threat Actors Deploy Bumblebee Malware via Poisoned Bing SEO Results

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
6 months 3 weeks ago

A newly identified cyberattack campaign has revealed the persistent and evolving threat of Bumblebee malware, a sophisticated downloader first discovered in 2022 and linked to ransomware groups like Conti. According to a recent report by Cyjax, threat actors have orchestrated a cunning SEO poisoning scheme targeting users of the Bing search engine. This campaign leverages […]

The post Threat Actors Deploy Bumblebee Malware via Poisoned Bing SEO Results appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Aman Mishra

Akira

Dark Feed IO
6 months 3 weeks ago

You must login to view this content

cohenido

Threat Actors Deliver Bumblebee Malware Poisoning Bing SEO

Cyber Security News
6 months 3 weeks ago

A sophisticated malware campaign leveraging search engine optimization (SEO) poisoning on Microsoft Bing has emerged, delivering the notorious Bumblebee malware to unsuspecting users. The campaign, identified in May 2025, specifically targets users searching for specialized software tools, demonstrating a concerning evolution in malware distribution tactics that exploits trusted search engine results. Bumblebee, a downloader malware […]

The post Threat Actors Deliver Bumblebee Malware Poisoning Bing SEO appeared first on Cyber Security News.

Tushar Subhra Dutta

CVE-2025-37892 | Linux Kernel up to 6.15-rc1 mtd inftl_read_oob return return value

VulDB Recent Entries
6 months 3 weeks ago
A vulnerability classified as problematic has been found in Linux Kernel up to 6.15-rc1. This affects the function inftl_read_oob of the component mtd. The manipulation of the argument return leads to unchecked return value. This vulnerability is uniquely identified as CVE-2025-37892. The attack needs to be approached within the local network. There is no exploit available. It is recommended to upgrade the affected component.
vuldb.com

Adidas Data Breach – Customers’ Personal Information Exposed

Cyber Security News
6 months 3 weeks ago

Adidas Korea has announced a security breach affecting customer data, marking the second major incident in the fashion industry targeting Korean consumers this month. The sportswear giant revealed that unauthorized access was gained through a third-party customer service provider, compromising customers’ personal information who had contacted their service centers. On May 16, Adidas disclosed on […]

The post Adidas Data Breach – Customers’ Personal Information Exposed appeared first on Cyber Security News.

Guru Baran

CISA Releases Thirteen Industrial Control Systems Advisories

CISA News
6 months 3 weeks ago

CISA released thirteen Industrial Control Systems (ICS) advisories on May 20, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS.

CISA encourages users and administrators to review newly released ICS advisories for technical details and mitigations.

CISA

Managed ad