Collaborate Disseminate
CISA has described the techniques used by attackers and pointed out that the focus is on high-value individuals.
The post CISA Warns of Spyware Targeting Messaging App Users appeared first on SecurityWeek.
Continue reading CISA Warns of Spyware Targeting Messaging App Users
Palo Alto Networks has conducted an analysis of malicious LLMs that help threat actors with phishing, malware development, and reconnaissance.
The post WormGPT 4 and KawaiiGPT: New Dark LLMs Boost Cybercrime Automation appeared first on SecurityWeek.
Continue reading WormGPT 4 and KawaiiGPT: New Dark LLMs Boost Cybercrime Automation
More than 100 alleged victims of the Oracle EBS campaign have been added to the Cl0p ransomware website.
The post Canon Says Subsidiary Impacted by Oracle EBS Hack appeared first on SecurityWeek.
Continue reading Canon Says Subsidiary Impacted by Oracle EBS Hack
CISA has added CVE-2025-61757 to its Known Exploited Vulnerabilities (KEV) catalog.
The post CISA Confirms Exploitation of Recent Oracle Identity Manager Vulnerability appeared first on SecurityWeek.
Continue reading CISA Confirms Exploitation of Recent Oracle Identity Manager Vulnerability
The Cl0p ransomware group has listed Mazda and Mazda USA as victims of the Oracle EBS campaign on its leak website.
The post Mazda Says No Data Leakage or Operational Impact From Oracle Hack appeared first on SecurityWeek.
Continue reading Mazda Says No Data Leakage or Operational Impact From Oracle Hack
More than 1.6 Tb of data allegedly stolen from Cox was made public by the hackers.
The post Cox Confirms Oracle EBS Hack as Cybercriminals Name 100 Alleged Victims appeared first on SecurityWeek.
Continue reading Cox Confirms Oracle EBS Hack as Cybercriminals Name 100 Alleged Victims
CVE-2025-61757 is an unauthenticated remote code execution vulnerability affecting Oracle Identity Manager.
The post Critical Oracle Identity Manager Flaw Possibly Exploited as Zero-Day appeared first on SecurityWeek.
Continue reading Critical Oracle Identity Manager Flaw Possibly Exploited as Zero-Day
The number of participants in the cyber and physical grid security exercise increased by nearly 50% compared to two years ago.
The post Over 370 Organizations Take Part in GridEx VIII Grid Security Exercise appeared first on SecurityWeek.
Continue reading Over 370 Organizations Take Part in GridEx VIII Grid Security Exercise
SquareX claims to have found a way to abuse a hidden Comet API to execute local commands, but Perplexity says the research is fake.
The post SquareX and Perplexity Quarrel Over Alleged Comet Browser Vulnerability appeared first on SecurityWeek.
Continue reading SquareX and Perplexity Quarrel Over Alleged Comet Browser Vulnerability
The Android malware is in development and appears to be mainly aimed at users in Europe.
The post New Sturnus Banking Trojan Targets WhatsApp, Telegram, Signal Messages appeared first on SecurityWeek.
Continue reading New Sturnus Banking Trojan Targets WhatsApp, Telegram, Signal Messages