Month: August 2025

What the LockBit 4.0 Leak Reveals About RaaS Groups Summary The May 2025 compromise of LockBit’s 4.0 affiliate panel exposed thousands of chats, ransomware builds and cryptowallet data, revealing a…

Patch Now: Attackers Target OT Networks via Critical RCE Flaw Summary Researchers at Palo Alto Networks Unit 42 have observed active exploitation of a critical remote code execution (RCE) vulnerability…

Popular AI Systems Still a Work-in-Progress for Security Summary New research from Forescout evaluated 50 large language models (LLMs) on offensive-security tasks and found that general-purpose LLMs are only partially…

Whispers of XZ Utils Backdoor Live on in Old Docker Images Summary Binarly has identified remnants of the infamous XZ Utils backdoor in older Docker Hub images, primarily Debian-based images…

Fortinet Products Are in the Crosshairs Again Summary Fortinet disclosed a critical unauthenticated command-injection remote code execution vulnerability in FortiSIEM (CVE-2025-25256), and practical proof-of-concept exploit code is already circulating. The…

North Korea Attacks South Koreans With Ransomware Summary A Scarcruft (aka APT37) subgroup called ChinopuNK has rolled out a multiphase campaign against targets in South Korea that combines infostealers, backdoors…

Russia curbs WhatsApp, Telegram calls to counter cybercrime Summary Russian authorities have restricted voice and video calls on WhatsApp and Telegram, saying the move aims to prevent fraud, extortion and…

Norway police believe pro-Russian hackers were behind April dam sabotage Summary Norway’s police security service (PST) says it suspects pro‑Russian hackers sabotaged a small dam in the country’s southwest in…

Turkish crypto exchange BTCTurk warns of security incident after $49 million leaves platform Summary BTCTurk, one of Turkey’s oldest and largest crypto exchanges, confirmed a security incident after blockchain security…