Attacks pinned to critical React2Shell defect surge, surpass 50 confirmed victims

Researchers warn that half of the exposed vulnerable instances remain unpatched as in-the-wild exploitation grows rapidly.

The post Attacks pinned to critical React2Shell defect surge, surpass 50 confirmed victims appeared first on CyberScoop.

Continue reading Attacks pinned to critical React2Shell defect surge, surpass 50 confirmed victims→

Microsoft’s last Patch Tuesday of 2025 addresses 57 defects, including one zero-day

Microsoft closed out the year with 1,139 total defects patched, making it the second-largest year in volume behind 2020, according to Trend Micro.

The post Microsoft’s last Patch Tuesday of 2025 addresses 57 defects, including one zero-day appeared first on CyberScoop.

Continue reading Microsoft’s last Patch Tuesday of 2025 addresses 57 defects, including one zero-day→

Officials offer $10M reward for information on IRGC-linked leader and close associate

Mohammad Bagher Shirinkar and Fatemeh Sedighian Kashi are accused of maintaining a close relationship planning and conducting cyberattacks of interest to the Iranian government.

The post Officials offer $10M reward for information on IRGC-linked leader and close associate appeared first on CyberScoop.

Continue reading Officials offer $10M reward for information on IRGC-linked leader and close associate→

Is ransomware finally on the decline? Treasury data offers cautious hope

Payments declined one-third to $734M, yet the number of victims confronting ransomware still remains a largely unchanged epidemic, sliding just 2% last year.

The post Is ransomware finally on the decline? Treasury data offers cautious hope appeared first on CyberScoop.

Continue reading Is ransomware finally on the decline? Treasury data offers cautious hope→

Twins with hacking history charged in insider data breach affecting multiple federal agencies

Muneeb and Sohaib Akhter previously pleaded guilty to hacking into the State Department and other cybercrimes in 2015.

The post Twins with hacking history charged in insider data breach affecting multiple federal agencies appeared first on CyberScoop.

Continue reading Twins with hacking history charged in insider data breach affecting multiple federal agencies→

Developers scramble as critical React flaw threatens major apps

The open-source code library is one of the most extensively used application frameworks. Wiz found vulnerable versions in around 39% of cloud environments.

The post Developers scramble as critical React flaw threatens major apps appeared first on CyberScoop.

Continue reading Developers scramble as critical React flaw threatens major apps→

University of Pennsylvania joins growing pool of Oracle customers impacted by Clop attacks

The Ivy League school said it was one of almost 100 organizations hit by the simultaneous attacks in August.

The post University of Pennsylvania joins growing pool of Oracle customers impacted by Clop attacks appeared first on CyberScoop.

Continue reading University of Pennsylvania joins growing pool of Oracle customers impacted by Clop attacks→

Google addresses 107 Android vulnerabilities, including two zero-days

The company’s latest security update contains the second-highest number of defects patched so far this year.

The post Google addresses 107 Android vulnerabilities, including two zero-days appeared first on CyberScoop.

Continue reading Google addresses 107 Android vulnerabilities, including two zero-days→

Authorities take down Cryptomixer, seize $28M in Switzerland

The cryptocurrency mixing service helped cybercriminals launder more than $1.5 billion in Bitcoin since it began operations in 2016, Europol said.

The post Authorities take down Cryptomixer, seize $28M in Switzerland appeared first on CyberScoop.

Continue reading Authorities take down Cryptomixer, seize $28M in Switzerland→

Crisis24 shuts down emergency notification system in wake of ransomware attack

OnSolve CodeRED was damaged by the attack and has been nonoperational since earlier this month. Dozens of agencies and their respective users have been impacted by the outage and data theft.

The post Crisis24 shuts down emergency notification system in wake of ransomware attack appeared first on CyberScoop.

Continue reading Crisis24 shuts down emergency notification system in wake of ransomware attack→