Security researchers discovered critical firmware vulnerabilities in Supermicro servers that enable complete system takeover through compromised Baseboard Management Controllers (BMCs). The flaws (CVE-2025-7937 and CVE-2025-6198) allow attackers to bypass security measures and install pers...
Cybersecurity researchers have discovered the OneClik campaign, a sophisticated attack targeting energy, oil, and gas organizations using Microsoft's ClickOnce technology. The campaign, linked to Chinese-affiliated threat actors, employs phishing emails with fake hardware analysis websites...
The Czech Republic has officially accused China of a cyber attack against its Foreign Ministry, attributing the breach to APT31, a state-sponsored threat actor linked to China's Ministry of State Security. The attack, which began in 2022, targeted an unclassified network designated as crit...
Chinese hackers have breached multiple US local government networks by exploiting a critical vulnerability (CVE-2025-0994) in Trimble Cityworks, a system widely used by municipalities and utilities. The threat group UAT-6382 began targeting these entities in January 2025, using sophisticat...
Russian state-sponsored hackers APT28 (Fancy Bear) have been targeting international organizations across 13 countries since 2022 to monitor and disrupt Ukraine aid efforts. The sophisticated campaign employs password spraying, spear-phishing, vulnerability exploitation, and stealth techni...
