LKQ Corporation, a major automotive parts supplier, reported a cybersecurity breach on November 13 affecting one of its Canadian operations. The company promptly contained the incident, which caused several weeks of operational disruptions. While data theft occurred, the attack was isolate...
A widespread password spray attack campaign targeting Citrix Netscaler devices has been reported, particularly affecting critical infrastructure sectors. Attackers are using brute force methods with generic usernames, attempting between 20,000 to one million login attempts. Citrix has resp...
Critical security vulnerabilities discovered in over 336,000 exposed Prometheus monitoring servers and exporters, revealing risks of information leakage, DoS attacks, and RCE exploitation. Researchers found eight official exporters vulnerable to RepoJacking, emphasizing the need for immedi...
Russian state-sponsored Gamaredon group expands operations with two new Android spyware tools, BoneSpy and PlainGnome, targeting Russian-speaking populations in former Soviet states. The malware, distributed through disguised legitimate apps, collects sensitive data including SMS, calls, p...
A critical security vulnerability in Apple's TCC framework (CVE-2024-44131) allowed unauthorized access to sensitive user data through the FileProvider component. The flaw enabled malicious apps to bypass privacy controls and access health data, camera, microphone, and personal files witho...
