Collaborate Disseminate
Microsoft and CrowdStrike are running a project that aims to align threat actor names, and Google and Palo Alto Networks will also contribute.
The post Microsoft, CrowdStrike Lead Effort to Map Threat Actor Names appeared first on SecurityWeek.
Continue reading Microsoft, CrowdStrike Lead Effort to Map Threat Actor Names
Exploitation of the vBulletin vulnerability tracked as CVE-2025-48827 and CVE-2025-48828 started shortly after disclosure.
The post vBulletin Vulnerability Exploited in the Wild appeared first on SecurityWeek.
Continue reading vBulletin Vulnerability Exploited in the Wild
Nova Scotia Power has finally admitted that the recent cyberattack was a ransomware attack, but it hasn’t paid the hackers.
The post Nova Scotia Power Confirms Ransomware Attack, 280k Notified of Data Breach appeared first on SecurityWeek.
Continue reading Nova Scotia Power Confirms Ransomware Attack, 280k Notified of Data Breach
The DanaBot botnet ensnared over 300,000 devices and caused more than $50 million in damages before being disrupted.
The post DanaBot Botnet Disrupted, 16 Suspects Charged appeared first on SecurityWeek.
Continue reading DanaBot Botnet Disrupted, 16 Suspects Charged
Marlboro-Chesterfield Pathology has been targeted by the SafePay ransomware group, which stole personal information from its systems.
The post Marlboro-Chesterfield Pathology Data Breach Impacts 235,000 People appeared first on SecurityWeek.
Continue reading Marlboro-Chesterfield Pathology Data Breach Impacts 235,000 People
UK retailer Marks & Spencer expects the disruptions caused by the recent cyberattack to continue through July.
The post Marks & Spencer Expects Ransomware Attack to Cost $400 Million appeared first on SecurityWeek.
Continue reading Marks & Spencer Expects Ransomware Attack to Cost $400 Million
More than 100 AutomationDirect MB-Gateway devices may be vulnerable to attacks from the internet due to CVE-2025-36535.
The post Critical Flaw Allows Remote Hacking of AutomationDirect Industrial Gateway appeared first on SecurityWeek.
Continue reading Critical Flaw Allows Remote Hacking of AutomationDirect Industrial Gateway
Many of the industrial control system (ICS) instances seen in internet scanning are likely or possibly honeypots, not real devices.
The post Up to 25% of Internet-Exposed ICS Are Honeypots: Researchers appeared first on SecurityWeek.
Continue reading Up to 25% of Internet-Exposed ICS Are Honeypots: Researchers
An OpenPGP.js vulnerability tracked as CVE-2025-47934 allows message signature verification to be spoofed.
The post Critical OpenPGP.js Vulnerability Allows Spoofing appeared first on SecurityWeek.
Continue reading Critical OpenPGP.js Vulnerability Allows Spoofing
The Likely Exploited Vulnerabilities (LEV) equations can help augment KEV- and EPSS-based remediation prioritization.
The post Vulnerability Exploitation Probability Metric Proposed by NIST, CISA Researchers appeared first on SecurityWeek.
Continue reading Vulnerability Exploitation Probability Metric Proposed by NIST, CISA Researchers