OT Networks Targeted in Widespread Exploitation of Erlang/OTP Vulnerability

The recently patched Erlang/OTP flaw CVE-2025-32433 has been exploited since early May, shortly after its existence came to light.
The post OT Networks Targeted in Widespread Exploitation of Erlang/OTP Vulnerability appeared first on SecurityWeek.
Continue reading OT Networks Targeted in Widespread Exploitation of Erlang/OTP Vulnerability→

Flaws in Major Automaker’s Dealership Systems Allowed Car Hacking, Personal Data Theft

A researcher has demonstrated how a platform used by over 1,000 dealerships in the US could have been used to hack cars.
The post Flaws in Major Automaker’s Dealership Systems Allowed Car Hacking, Personal Data Theft appeared first on SecurityWeek.
Continue reading Flaws in Major Automaker’s Dealership Systems Allowed Car Hacking, Personal Data Theft→

Russian Hackers Exploited WinRAR Zero-Day in Attacks on Europe, Canada

WinRAR has patched CVE-2025-8088, a zero-day exploited by Russia’s RomCom in attacks on financial, defense, manufacturing and logistics companies.
The post Russian Hackers Exploited WinRAR Zero-Day in Attacks on Europe, Canada appeared first on Securit… Continue reading Russian Hackers Exploited WinRAR Zero-Day in Attacks on Europe, Canada→

French Telecom Firm Bouygues Says Data Breach Affects 6.4M Customers

Bouygues has been targeted in a cyberattack that resulted in the personal information of millions of customers getting compromised.
The post French Telecom Firm Bouygues Says Data Breach Affects 6.4M Customers appeared first on SecurityWeek.
Continue reading French Telecom Firm Bouygues Says Data Breach Affects 6.4M Customers→

SonicWall Says Recent Attacks Don’t Involve Zero-Day Vulnerability

SonicWall has been investigating reports about a zero-day potentially being exploited in ransomware attacks, but found no evidence of a new vulnerability. 
The post SonicWall Says Recent Attacks Don’t Involve Zero-Day Vulnerability appeared first… Continue reading SonicWall Says Recent Attacks Don’t Involve Zero-Day Vulnerability→