Aggregator

Submit #563534 / VDB-307400

Submit #563533 / VDB-307399

UK-based retailers Marks & Spencer, Co-op, and Harrods have been targeted by cyber attackers in the last few weeks. Whether the attacks have been mounted by the same group is difficult to say for sure: the victimized businesses are sharing little in the way of details and the professed attackers are likely to exaggerate the effect of the attacks and otherwise mislead everyone involved and everyone watching from the outside. What do we know about … More →

The post UK retailers under cyber attack: Co-op member data compromised appeared first on Help Net Security.

A hacker stole data from TeleMessage, exposing messages from its modified Signal, WhatsApp, and other apps sold to the U.S. government. A hacker stole customer data from TeleMessage, an Israeli firm selling modified versions of popular messaging apps, such as Signal and WhatsApp, to the U.S. government. “The data stolen by the hacker contains the […]

Leading cryptocurrency exchange Kraken has disclosed that it recently thwarted an infiltration attempt by a suspected North Korean hacker posing as a job applicant. The attempted breach highlights the increasing sophistication of state-backed cyber operations targeting the digital assets sector. According to Kraken’s security team, the incident unfolded when a highly convincing applicant submitted a […]

The post North Korean Hacker Tries to Infiltrate Kraken Through Job Application appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Submit #563522 / VDB-307398

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.

• CVE-2025-3248 Langflow Missing Authentication Vulnerability

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.

Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the Known Exploited Vulnerabilities Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.

Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.

This week we’re celebrating National Small Business Week—which recognizes and celebrates the small and medium-sized business (SMB) community’s significant contributions to the nation. SMBs are a substantial and critical part of the U.S. and global economic and cybersecurity infrastructure. According to the U.S. Small Business Administration’s Office of Advocacy, [1] there are 34.8 million SMBs in the United States (making up 99% of all U.S. businesses). Of those, 81.7% are non-employer firms with no paid employees other than the owners of the business. These businesses, though small in size

Submit #561628 / VDB-307397

Submit #561626 / VDB-307396

Submit #561625 / VDB-307395

Submit #553644 / VDB-307394

Microsoft has silently fixed an issue that broke Start Menu jump lists for all apps on systems running Windows 10, version 22H2. [...]

Submit #483834 / VDB-307392

For the latest discoveries in cyber research for the week of 5th May, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Three major UK retailers – Co-op, Harrods and Marks & Spencer (M&S) – were hit by cyberattacks that disrupted operations and compromised sensitive data. The attacks are believed linked to the Scattered […]

The post 5th May – Threat Intelligence Report appeared first on Check Point Research.

Submit #563175 / VDB-307391

Submit #563102 / VDB-307390

A vulnerability was suspected in Lingxing ERP 2. This issue was flagged as a false-positive. Please consult the sources mentioned and consider not using this entry at all. The vendor was not able to verify the existence of the original vulnerability report and the researcher was not able to provide further proof.

A vulnerability was suspected in Lingxing ERP 2. This issue appears to be a false-positive. Please verify the sources mentioned and consider not using this entry at all. The vendor was not able to verify the existence of the original vulnerability report and the researcher was not able to provide further proof.

Submit #563515 / VDB-307389