State-sponsored hackers have actively exploited CVE-2025-59689, a command injection vulnerability in Libraesva Email Security Gateway systems. The flaw allows attackers to execute unauthorized commands through malicious compressed email attachments, affecting ESG versions 4.5 through 5.5.x...
Cybercriminals from the "Scattered Lapsus$ Hunters" group successfully created a fraudulent account in Google's Law Enforcement Request System (LERS), a platform used by police and intelligence agencies to request user data. While Google confirmed the breach and disabled the fake account, ...
SafePay ransomware group has claimed responsibility for attacking IT distributor giant Ingram Micro, threatening to leak 3.5TB of stolen company data. The cyberattack caused global system outages and forced remote work, but Ingram Micro restored full operations within four days through com...
A 25-year-old California hacker, Ryan Kramer (alias "NullBulge"), has pleaded guilty to stealing 1.1TB of confidential Disney data through a sophisticated social engineering attack. Kramer distributed malware disguised as an AI tool that infected a Disney employee's computer, giving him ac...
Researchers have discovered DslogdRAT, a new malware exploiting CVE-2025-0282 in Ivanti Connect Secure (ICS). This critical vulnerability allows unauthenticated remote code execution and was patched in January 2025. The attack deploys a Perl web shell that installs DslogdRAT, which then co...
