Aggregator
Brazilian Firm Futurize Sistemas Breached
You must login to view this content
Ransomware Hits a Claims Giant: What the Sedgwick Breach Reveals About Modern Extortion Attacks
A recent breach disclosure reveals that claims management firm Sedgwick was targeted by the TridentLocker ransomware group, with attackers claiming to have exfiltrated sensitive data from systems supporting its government services operations before deploying ransomware, according to Cybersecurity News. While Sedgwick has not disclosed full technical details, the incident follows a well-established ransomware playbook. Attackers
The post Ransomware Hits a Claims Giant: What the Sedgwick Breach Reveals About Modern Extortion Attacks appeared first on Seceon Inc.
The post Ransomware Hits a Claims Giant: What the Sedgwick Breach Reveals About Modern Extortion Attacks appeared first on Security Boulevard.
Windows Packer pkr_mtsi Powers Widespread Malvertising Campaigns Delivering Multiple Malware Families
A sophisticated Windows packer known as pkr_mtsi has emerged as a powerful tool for delivering multiple malware families through widespread malvertising campaigns. First detected on April 24, 2025, this malicious packer continues to operate actively, distributing trojanized installers disguised as legitimate software applications. The packer targets popular tools including PuTTY, Rufus, and Microsoft Teams, using […]
The post Windows Packer pkr_mtsi Powers Widespread Malvertising Campaigns Delivering Multiple Malware Families appeared first on Cyber Security News.
Microsoft: Classic Outlook bug prevents opening encrypted emails
CVE-2025-69346 | WPCenter AffiliateX Plugin up to 1.3.9.3 on WordPress authorization (EUVD-2026-0950 / CNNVD-202601-992)
CVE-2025-69348 | CoolHappy Events Calendar Countdown Addon Plugin up to 1.4.15 on WordPress authorization (EUVD-2026-0949 / CNNVD-202601-991)
CVE-2025-69336 | bdthemes Ultimate Store Kit Elementor Addons Plugin up to 2.9.4 on WordPress authorization (CNNVD-202601-994)
CVE-2025-69341 | BuddhaThemes WeDesignTech Ultimate Booking Addon Plugin up to 1.0.3 on WordPress authorization (CNNVD-202601-995)
CVE-2025-69345 | BoldGrid Post and Page Builder Plugin up to 1.27.9 on WordPress authorization (EUVD-2026-0961 / CNNVD-202601-993)
CVE-2025-69342 | VanKarWai Calafate Plugin up to 1.7.7 on WordPress filename control (CNNVD-202601-996)
ownCloud Urges Users to Enable Multi-Factor Authentication Following Credential Theft
ownCloud has urgently urged users of its Community Edition to enable multi-factor authentication (MFA). A threat intelligence report from Hudson Rock highlighted incidents in which attackers compromised self-hosted file-sharing platforms, including some ownCloud deployments, but ownCloud stresses that its platform itself remains unbreached. Hudson Rock’s analysis revealed no zero-day exploits or vulnerabilities in ownCloud’s architecture. […]
The post ownCloud Urges Users to Enable Multi-Factor Authentication Following Credential Theft appeared first on Cyber Security News.
CrazyHunter Ransomware Attacking Healthcare Sector with Advanced Evasion Techniques
CrazyHunter ransomware has emerged as a critical and evolving threat that specifically targets healthcare organizations and sensitive medical infrastructure. This Go-developed malware represents a significant escalation in ransomware sophistication, employing advanced encryption methods and delivery mechanisms designed to bypass modern security defenses. Healthcare institutions in Taiwan have experienced repeated attacks, with at least six known […]
The post CrazyHunter Ransomware Attacking Healthcare Sector with Advanced Evasion Techniques appeared first on Cyber Security News.
CVE-2020-36907 | Aerohive HiveOS up to 11.x NetConfig UI action.php5 allocation of resources (Exploit 48441 / EUVD-2026-1030)
CVE-2020-36914 | Shenzhen Xingmeng Qihang Media QiHang Media Web Digital Signage 3.0.9.0 cleartext transmission (ZSL-2020-5578 / EUVD-2026-1023)
CVE-2020-36908 | Secure Computing SnapGear Management Console SG560 3.1.5 cross-site request forgery (Exploit 48554 / EUVD-2026-1027)
CVE-2020-36906 | P5 FNIP-8x16A/FNIP-4xSH 1.0.11/1.0.20 cross-site request forgery (Exploit 48362 / EUVD-2026-1028)
CVE-2026-0641 | TOTOLINK WA300 5.2cu.7112_B20190227 cstecgi.cgi sub_401510 UPLOAD_FILENAME command injection (EUVD-2026-0958)
Go jump in a lake: Measuring the data lake effect on your SIEM
Akira
You must login to view this content