Aggregator

Bouygues Telecom suffered a cyberattack that compromised the personal information of 6.4 million customers. French telecommunications company Bouygues Telecom suffered a cyberattack that resulted in the compromise of personal information of 6.4 million customers. Bouygues Telecom, part of the Bouygues industrial group, is one of France’s leading telecom providers, offering mobile, internet, and IPTV services. […]

A sophisticated new variant of the DarkCloud information stealer has emerged in the cyberthreat landscape, targeting Windows users through carefully crafted phishing campaigns designed to harvest sensitive credentials and financial information. This fileless malware variant represents a significant evolution in stealer technology, employing advanced evasion techniques and multi-stage deployment mechanisms that make detection particularly challenging […]

The post New Windows-Based DarkCloud Stealer Attacking Computers to Steal Login Credentials and Financial Data appeared first on Cyber Security News.

A new documentary series about cybercrime airing next month on HBO Max features interviews with Yours Truly. The four-part series follows the exploits of Julius Kivimäki, a prolific Finnish hacker recently convicted of leaking tens of thousands of patient records from an online psychotherapy practice while attempting to extort the clinic and its patients.

A new documentary series about cybercrime airing next month on HBO Max features interviews with Yours Truly. The four-part series follows the exploits of Julius Kivimäki, a prolific Finnish hacker recently convicted of leaking tens of thousands of patient records from an online psychotherapy practice while attempting to extort the clinic and its patients.

OpenAI's CEO, Sam Altman, overpromised on GPT-5, and real-life results are underwhelming, but it looks like a new update is rolling out that might address some of the concerns. [...]

A vulnerability was found in 7-Zip up to 25.00. It has been classified as critical. This affects an unknown part of the component Symbolic Links Handler. The manipulation leads to link following. This vulnerability is uniquely identified as CVE-2025-55188. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

The new Linux 6.17 kernel introduces a unified standard for the so-called “performance button” increasingly found on gaming laptops. This key now has an assigned unique code—KEY_PERFORMANCE—allowing Linux systems to properly recognize it and...

The post Linux 6.17 Kernel Gets a Performance Boost for Gaming Laptops appeared first on Penetration Testing Tools.

Why is Secrets Management Essential in Today’s Cybersecurity Landscape? One prevailing question often emerges among cybersecurity professionals: Why is secrets management crucial to our digital?  In essence, secrets management – the process of managing and safeguarding digital keys, certificates, and passwords – has rapidly become a prime concern in cybersecurity and data protection. NHIs and […]

The post Choosing the Right Secrets Management Solution appeared first on Entro.

The post Choosing the Right Secrets Management Solution appeared first on Security Boulevard.

Are Your Cybersecurity Measures Equipped to Handle Evolving Threats? Do you often question the adequacy of your cybersecurity measures against constantly shifting of digital threats? The key lies in comprehensively managing Non-Human Identities (NHIs) and Secrets Security Management. It is a crucial aspect of cybersecurity often overlooked, leaving gaping holes in the defense of many […]

The post Can Your Cybersecurity Handle Evolving Threats? appeared first on Entro.

The post Can Your Cybersecurity Handle Evolving Threats? appeared first on Security Boulevard.

What’s the Buzz About Secrets Sprawl Management? It’s no secret that businesses are increasingly relying on digital infrastructure and cloud services. But do you know what keeps IT specialists and cybersecurity experts on their toes? The answer is non-human identity (NHI) management and secrets sprawl management. These exciting advances promise to revolutionize the way businesses […]

The post Exciting Advances in Secrets Sprawl Management appeared first on Entro.

The post Exciting Advances in Secrets Sprawl Management appeared first on Security Boulevard.

Does your Cybersecurity Strategy Account for NHIs? Non-Human Identities (NHIs) and Secrets management play integral roles. They are often overlooked in the shadow of other robust security measures, leading to potential vulnerabilities. NHIs are essentially machine identities used in data security. They are created by combining a “Secret”, a unique encrypted identifier similar to a […]

The post How Cybersecurity Is Getting Better with NHIs appeared first on Entro.

The post How Cybersecurity Is Getting Better with NHIs appeared first on Security Boulevard.

A cybercrime antihero has been stealing and then reselling credentials from unsavory online characters. Their motives are questionable, but the schadenfreude is irresistible.

Critical security flaws in Axis Communications’ surveillance infrastructure have left over 6,500 organizations worldwide vulnerable to sophisticated cyberattacks, with potential impacts spanning government agencies, educational institutions, and Fortune 500 companies. The Swedish security camera manufacturer’s popular video surveillance products contain four distinct vulnerabilities that could allow attackers to gain complete control over camera networks and […]

The post Axis Camera Server Vulnerabilities Exposes Thousands of Organizations to Attack appeared first on Cyber Security News.

A recently fixed WinRAR vulnerability tracked as CVE-2025-8088 was exploited as a zero-day in phishing attacks to install the RomCom malware. [...]

A vulnerability was found in Qiyuesuo Eelectronic Signature Platform up to 4.34 and classified as critical. Affected by this issue is the function execute of the file /api/code/upload of the component Scheduled Task Handler. The manipulation of the argument File leads to unrestricted upload. This vulnerability is handled as CVE-2025-8775. The attack may be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability has been found in riscv-boom SonicBOOM up to 2.2.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component L1 Data Cache Handler. The manipulation leads to observable timing discrepancy. This vulnerability is known as CVE-2025-8774. Local access is required to approach this attack. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #625553 / VDB-319298

Submit #625551 / VDB-319298

Submit #625550 / VDB-319297

A vulnerability, which was classified as critical, was found in Dinstar Monitoring Platform 甘肃省危险品库监控平台 1.0. Affected is an unknown function of the file /itc/$%7BappPath%7D/login_getPasswordErrorNum.action. The manipulation of the argument userBean.loginName leads to sql injection. This vulnerability is traded as CVE-2025-8773. It is possible to launch the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.