Cybersecurity and other IT news aggregator

LATEST FEEDS

  • Marketing, Law Firms Say Data Breaches Impact Over 200,000 People

    Marketing, Law Firms Say Data Breaches Impact Over 200,000 People 2025-07-21 at 15:01 By Eduard Kovacs Cierant Corporation and Zumpano Patricios independently disclosed data breaches, each impacting more than 200,000 individuals. The post Marketing, Law Firms Say Data Breaches Impact Over 200,000 People appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View…

  • ⚡ Weekly Recap: SharePoint 0-Day, Chrome Exploit, macOS Spyware, NVIDIA Toolkit RCE and More

    ⚡ Weekly Recap: SharePoint 0-Day, Chrome Exploit, macOS Spyware, NVIDIA Toolkit RCE and More 2025-07-21 at 15:01 By Even in well-secured environments, attackers are getting in—not with flashy exploits, but by quietly taking advantage of weak settings, outdated encryption, and trusted tools left unprotected. These attacks don’t depend on zero-days. They work by staying unnoticed—slipping…

  • Assessing the Role of AI in Zero Trust

    Assessing the Role of AI in Zero Trust 2025-07-21 at 15:01 By By 2025, Zero Trust has evolved from a conceptual framework into an essential pillar of modern security. No longer merely theoretical, it’s now a requirement that organizations must adopt. A robust, defensible architecture built on Zero Trust principles does more than satisfy baseline…

  • Ethereum mirrors stocks as ETH price chart hints at ‘final surge’ to $8K

    Ethereum mirrors stocks as ETH price chart hints at ‘final surge’ to $8K 2025-07-21 at 14:07 By Cointelegraph by Yashu Gola Ether’s current structure mirrors the Dow Jones’s 1980 bull run, with technical patterns reinforcing the ETH price rally outlook. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

  • Microsoft patches under-attack SharePoint 2019 and SE

    Microsoft patches under-attack SharePoint 2019 and SE 2025-07-21 at 13:24 By Richard Speed But an emergency fix for SharePoint Server 2016 is still MIA Microsoft is releasing out-of-band security updates for SharePoint Server 2019 and SharePoint Server Subscription Edition, following a warning that vulnerable versions were now under attack.… This article is an excerpt from…

  • ToolShell: Critical SharePoint Zero-Day Patched After Exploitation in the Wild

    ToolShell: Critical SharePoint Zero-Day Patched After Exploitation in the Wild 2025-07-21 at 13:02 By Threat Hunter Team Symantec products already block CVE-2025-53770 exploit attempts. This article is an excerpt from Broadcom Software Blogs View Original Source React to this headline:

  • Blockchain compliance tools can slash TradFi costs — Chainlink co-founder

    Blockchain compliance tools can slash TradFi costs — Chainlink co-founder 2025-07-21 at 13:02 By Cointelegraph by Zoltan Vardai Institutional investors will increasingly adopt blockchain-based compliance solutions and tokenized RWAs, Chainlink’s co-founder Sergey Nazarov told Cointelegraph. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

  • Surveillance Firm Bypasses SS7 Protections to Retrieve User Location

    Surveillance Firm Bypasses SS7 Protections to Retrieve User Location 2025-07-21 at 13:02 By Ionut Arghire A surveillance company was caught using an SS7 bypass technique to trick wireless carriers into divulging users’ locations. The post Surveillance Firm Bypasses SS7 Protections to Retrieve User Location appeared first on SecurityWeek. This article is an excerpt from SecurityWeek…

  • SEC explores Ethereum token standard for compliant securities

    SEC explores Ethereum token standard for compliant securities 2025-07-21 at 12:51 By Cointelegraph by Ezra Reguerra ERC-3643 Association president Dennis O’Connell told Cointelegraph the SEC showed “a noticeable shift in tone” and openness to blockchain standards. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

  • Selling your digital soul to use Bluesky’s DMs isn’t just a bad idea, it’s the law

    Selling your digital soul to use Bluesky’s DMs isn’t just a bad idea, it’s the law 2025-07-21 at 12:51 By Rupert Goodwins Getting carded is one thing. A full strip search? Welcome to Britain Opinion  On June 10, social network Bluesky announced that in 15 days it would introduce age verification for UK users, to…

  • 750,000 Impacted by Data Breach at The Alcohol & Drug Testing Service

    750,000 Impacted by Data Breach at The Alcohol & Drug Testing Service 2025-07-21 at 12:50 By Ionut Arghire The Alcohol & Drug Testing Service (TADTS) says personal information was stolen in a July 2024 ransomware attack. The post 750,000 Impacted by Data Breach at The Alcohol & Drug Testing Service appeared first on SecurityWeek. This…

  • Microsoft Patches ‘ToolShell’ Zero-Days Exploited to Hack SharePoint Servers

    Microsoft Patches ‘ToolShell’ Zero-Days Exploited to Hack SharePoint Servers 2025-07-21 at 12:50 By Eduard Kovacs Microsoft has started releasing updates to fix the exploited SharePoint zero-days tracked as CVE-2025-53770 and CVE-2025-53771. The post Microsoft Patches ‘ToolShell’ Zero-Days Exploited to Hack SharePoint Servers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original…

  • Exploited CrushFTP Zero-Day Provides Admin Access to Servers

    Exploited CrushFTP Zero-Day Provides Admin Access to Servers 2025-07-21 at 10:46 By Ionut Arghire Hackers are exploiting a zero-day vulnerability in CrushFTP to gain administrative privileges on vulnerable servers via HTTPS. The post Exploited CrushFTP Zero-Day Provides Admin Access to Servers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source…

  • PoisonSeed Hackers Bypass FIDO Keys Using QR Phishing and Cross-Device Sign-In Abuse

    PoisonSeed Hackers Bypass FIDO Keys Using QR Phishing and Cross-Device Sign-In Abuse 2025-07-21 at 10:46 By Cybersecurity researchers have disclosed a novel attack technique that allows threat actors to bypass Fast IDentity Online (FIDO) key protections by deceiving users into approving authentication requests from spoofed company login portals. The activity, observed by Expel as part…

  • Ethereum’s Fusaka upgrade set for November, Glamsterdam planning next

    Ethereum’s Fusaka upgrade set for November, Glamsterdam planning next 2025-07-21 at 09:54 By Cointelegraph by Tarang Khaitan Fusaka hard fork’s next devnet will go live on Wednesday. The first public testnet is scheduled to launch in late September. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

  • US bank lobby challenges crypto firms’ bids for bank licences

    US bank lobby challenges crypto firms’ bids for bank licences 2025-07-21 at 09:54 By Cointelegraph by Jesse Coghlan US banking and credit union groups asked the OCC to delay deciding on bank license applications from crypto firms, arguing there are “significant policy and process concerns.” This article is an excerpt from Cointelegraph.com News View Original…

  • ‘Rich Dad, Poor Dad’ author warns Bitcoin ‘bubble’ could burst soon

    ‘Rich Dad, Poor Dad’ author warns Bitcoin ‘bubble’ could burst soon 2025-07-21 at 09:54 By Cointelegraph by Martin Young Robert Kiyosaki says that asset bubbles will soon “bust”, and when they do, “odds are gold, silver, and Bitcoin will bust too.” This article is an excerpt from Cointelegraph.com News View Original Source React to this…

  • Alaska Airlines grounds itself due to mysterious IT problem

    Alaska Airlines grounds itself due to mysterious IT problem 2025-07-21 at 09:54 By Simon Sharwood Dare we suggest Scattered Spider has poisoned another carrier? US carrier Alaska Airlines has grounded its fleet due to an unspecified IT issue.… This article is an excerpt from The Register View Original Source React to this headline:

  • How to land your first job in cybersecurity

    How to land your first job in cybersecurity 2025-07-21 at 09:54 By Help Net Security According to LinkedIn, job applications have surged over 45% in the past year, with 11,000 applications submitted every minute. This flood of applications is making it harder than ever for qualified candidates to stand out. The industry has become highly…

  • World Health Organization CISO on securing global health emergencies

    World Health Organization CISO on securing global health emergencies 2025-07-21 at 08:49 By Mirko Zorz In this Help Net Security interview, Flavio Aggio, CISO at the World Health Organization (WHO), explains how the organization prepares for and responds to cyber threats during global health emergencies. These crises often lead to an increase in phishing scams,…

  • Calico: Open-source solution for Kubernetes networking, security, and observability

    Calico: Open-source solution for Kubernetes networking, security, and observability 2025-07-21 at 08:12 By Mirko Zorz Calico is an open-source unified platform that brings together networking, security, and observability for Kubernetes, whether you’re running in the cloud, on-premises, or at the edge. The solution uses the lowest amount of processing resources, which is especially important in…

  • The Future of Public Transit: Leveraging AI Analytics for Enhanced Operations and Passenger Experience

    The Future of Public Transit: Leveraging AI Analytics for Enhanced Operations and Passenger Experience 2025-07-21 at 08:12 By As AI technology advances, transit agencies embrace innovations to meet the growing demands of modern urban mobility. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

  • Ethereum is scaling: TPS, gas limit up as validators back 45M target

    Ethereum is scaling: TPS, gas limit up as validators back 45M target 2025-07-21 at 07:35 By Cointelegraph by Martin Young Ethereum’s gas limit climbed over 37 million, with 47% of validators supporting a jump to 45 million. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

  • UK working to sell $7B in seized Bitcoin to boost budget: Report

    UK working to sell $7B in seized Bitcoin to boost budget: Report 2025-07-21 at 07:35 By Cointelegraph by Jesse Coghlan A new report suggests the UK Treasury is working to sell up to $7 billion worth of seized Bitcoin, but one person has slammed the report as “sensationalism” amid a crypto bull run. This article…

  • Cyber turbulence ahead as airlines strap in for a security crisis

    Cyber turbulence ahead as airlines strap in for a security crisis 2025-07-21 at 07:35 By Sinisa Markovic Aircraft systems are getting more connected and ground operations increasingly integrated, and attackers are taking notice. They’re shifting from minor disruptions to targeting critical systems with serious intent. Any time an aircraft transmits data, whether it’s flight position…

  • Are your employees using Chinese GenAI tools at work?

    Are your employees using Chinese GenAI tools at work? 2025-07-21 at 07:35 By Anamarija Pogorelec Nearly one in 12 employees are using Chinese-developed generative AI tools at work, and they’re exposing sensitive data in the process. That’s according to new research from Harmonic Security, which analyzed the behavior of roughly 14,000 end users in the…

  • Microsoft Releases Urgent Patch for SharePoint RCE Flaw Exploited in Ongoing Cyber Attacks

    Microsoft Releases Urgent Patch for SharePoint RCE Flaw Exploited in Ongoing Cyber Attacks 2025-07-21 at 07:35 By Microsoft on Sunday released security patches for an actively exploited security flaw in SharePoint and also released details of another vulnerability that it said has been addressed with “more robust protections.” The tech giant acknowledged it’s “aware of…

  • Hard-Coded Credentials Found in HPE Instant On Devices Allow Admin Access

    Hard-Coded Credentials Found in HPE Instant On Devices Allow Admin Access 2025-07-21 at 07:35 By Hewlett-Packard Enterprise (HPE) has released security updates to address a critical security flaw affecting Instant On Access Points that could allow an attacker to bypass authentication and gain administrative access to susceptible systems. The vulnerability, tracked as CVE-2025-37103, carries a…

  • 3,500 Websites Hijacked to Secretly Mine Crypto Using Stealth JavaScript and WebSocket Tactics

    3,500 Websites Hijacked to Secretly Mine Crypto Using Stealth JavaScript and WebSocket Tactics 2025-07-21 at 07:35 By A new attack campaign has compromised more than 3,500 websites worldwide with JavaScript cryptocurrency miners, marking the return of browser-based cryptojacking attacks once popularized by the likes of CoinHive.  Although the service has since shuttered after browser makers…

  • Fix incoming for MetaMask bug that’s slowly killing solid-state drives

    Fix incoming for MetaMask bug that’s slowly killing solid-state drives 2025-07-21 at 06:20 By Cointelegraph by Stephen Katte Consensys says it’s aware of a small number of MetaMask users reporting “unusually high disk activity” and will be issuing a fix very soon. This article is an excerpt from Cointelegraph.com News View Original Source React to…

  • Vibe coding service Replit deleted user’s production database, faked data, told fibs galore

    Vibe coding service Replit deleted user’s production database, faked data, told fibs galore 2025-07-21 at 06:20 By Simon Sharwood AI ignored instruction to freeze code, forgot it could roll back errors, and generally made a terrible hash of things The founder of SaaS business development outfit SaaStr has claimed AI coding tool Replit deleted a…

  • 3.5 Million Records Exposed in Australian Global Fashion Brand Data Breach

    3.5 Million Records Exposed in Australian Global Fashion Brand Data Breach 2025-07-21 at 04:52 View original post at vpnMentor Cybersecurity Researcher, Jeremiah Fowler, discovered and reported to vpnMentor about an unencrypted and non-password-protected database that contained 3,587,960 records. The database, which presumably belongs to an Australian fashion brand, held invoices, shipping information, and return details.…

  • AI and blockchain are already disrupting legacy education system

    AI and blockchain are already disrupting legacy education system 2025-07-21 at 00:02 By Cointelegraph by Vince Quill Projects across multiple educational sectors are leveraging AI and blockchain to provide more accessible alternatives to students. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

  • Microsoft SharePoint servers under attack via zero-day vulnerability with no patch (CVE-2025-53770)

    Microsoft SharePoint servers under attack via zero-day vulnerability with no patch (CVE-2025-53770) 2025-07-21 at 00:02 By Zeljka Zorz Attackers are exploiting a zero-day variant (CVE-2025-53770) of a SharePoint remote code execution vulnerability (CVE-2025-49706) that Microsoft patched earlier this month, the company has confirmed on Saturday. CVE-2025-53770 is being leveraged to place a backdoor on vulnerable…

  • Saylor signals Bitcoin buy as Strategy’s stash climbs to over $71B

    Saylor signals Bitcoin buy as Strategy’s stash climbs to over $71B 2025-07-20 at 21:09 By Cointelegraph by Vince Quill Strategy continues accumulating Bitcoin as it hits all-time highs in July, and the total crypto market cap breaches the $4 trillion mark. This article is an excerpt from Cointelegraph.com News View Original Source React to this…

  • EncryptHub Targets Web3 Developers Using Fake AI Platforms to Deploy Fickle Stealer Malware

    EncryptHub Targets Web3 Developers Using Fake AI Platforms to Deploy Fickle Stealer Malware 2025-07-20 at 19:41 By The financially motivated threat actor known as EncryptHub (aka LARVA-208 and Water Gamayun) has been attributed to a new campaign that’s targeting Web3 developers to infect them with information stealer malware. “LARVA-208 has evolved its tactics, using fake…

  • Bitcoin gets $125K target as trader sees ‘big move’ next, ETH hits $3750

    Bitcoin gets $125K target as trader sees ‘big move’ next, ETH hits $3750 2025-07-20 at 19:07 By Cointelegraph by William Suberg Bitcoin and Ether traders are eyeing price milestones into the weekly close, with a resistance trend line keeping BTC bulls from heading to all-time highs. This article is an excerpt from Cointelegraph.com News View…

  • Embedding human rights into crypto isn’t optional, it’s foundational

    Embedding human rights into crypto isn’t optional, it’s foundational 2025-07-20 at 19:07 By Cointelegraph by Shady El Damaty Embedding human rights into crypto systems is a necessity. Self-custody, privacy-by-default, and censorship-resistant personhood must be core design principles for any technology. The future of digital freedom depends on it. This article is an excerpt from Cointelegraph.com…

  • US signals intention to rethink job H-1B lottery

    US signals intention to rethink job H-1B lottery 2025-07-20 at 17:17 By Thomas Claburn Foreign worker program represents betrayal of US computer science students, advocacy group argues The US Department of Homeland Security (DHS) and the US Citizenship and Immigration Services (USCIS) intend to reevaluate how H-1B visas are issued, according to a regulatory filing.……

  • SharePoint Under Attack: Microsoft Warns of Zero-Day Exploited in the Wild – No Patch Available

    SharePoint Under Attack: Microsoft Warns of Zero-Day Exploited in the Wild – No Patch Available 2025-07-20 at 17:16 By Mike Lennon Enterprises running SharePoint servers should not wait for a fix for CVE-2025-53770 and should commence threat hunting to search for compromise immediately. The post SharePoint Under Attack: Microsoft Warns of Zero-Day Exploited in the…

  • Experts say ‘just a starting point’ as Crypto Week ends on a high note

    Experts say ‘just a starting point’ as Crypto Week ends on a high note 2025-07-20 at 15:03 By Cointelegraph by Amin Haqshanas The GENIUS Act marks a turning point for crypto regulation, but experts say true integration with finance and identity systems is only beginning. This article is an excerpt from Cointelegraph.com News View Original…

  • UK uncovers novel Microsoft snooping malware, blames and sanctions GRU cyberspies

    UK uncovers novel Microsoft snooping malware, blames and sanctions GRU cyberspies 2025-07-20 at 14:28 By Jessica Lyons Fancy Bear can’t keep its claws out of Outlook inboxes The UK government is warning that Russia’s APT28 (also known as Fancy Bear or Forest Blizzard) has been deploying previously unknown malware to harvest Microsoft email credentials and…

  • Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Global Organizations

    Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Global Organizations 2025-07-20 at 13:17 By A critical security vulnerability in Microsoft SharePoint Server has been weaponized as part of an “active, large-scale” exploitation campaign. The zero-day flaw, tracked as CVE-2025-53770 (CVSS score: 9.8), has been described as a variant of CVE-2025-49706 (CVSS score: 6.3), a spoofing…

  • Malware Injected into 6 npm Packages After Maintainer Tokens Stolen in Phishing Attack

    Malware Injected into 6 npm Packages After Maintainer Tokens Stolen in Phishing Attack 2025-07-20 at 13:17 By Cybersecurity researchers have alerted to a supply chain attack that has targeted popular npm packages via a phishing campaign designed to steal the project maintainers’ npm tokens. The captured tokens were then used to publish malicious versions of…

  • Hackers Exploit Critical CrushFTP Flaw to Gain Admin Access on Unpatched Servers

    Hackers Exploit Critical CrushFTP Flaw to Gain Admin Access on Unpatched Servers 2025-07-20 at 12:49 By A newly disclosed critical security flaw in CrushFTP has come under active exploitation in the wild. Assigned the CVE identifier CVE-2025-54309, the vulnerability carries a CVSS score of 9.0. “CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the…

  • GENIUS Act blocks Big Tech, banks from dominating stablecoins: Circle exec

    GENIUS Act blocks Big Tech, banks from dominating stablecoins: Circle exec 2025-07-20 at 11:02 By Cointelegraph by Amin Haqshanas Circle’s Dante Disparte says the GENIUS Act ensures tech giants and banks can’t dominate the stablecoin market without facing strict structural and regulatory hurdles. This article is an excerpt from Cointelegraph.com News View Original Source React…

  • Week in review: Google fixes zero-day vulnerability in Chrome, critical SQL injection flaw in FortiWeb

    Week in review: Google fixes zero-day vulnerability in Chrome, critical SQL injection flaw in FortiWeb 2025-07-20 at 11:02 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Update Google Chrome to fix actively exploited zero-day (CVE-2025-6558) For the fifth time this year, Google has patched…

  • Charles Hoskinson says audit report ‘shaping up’ for August release

    Charles Hoskinson says audit report ‘shaping up’ for August release 2025-07-20 at 10:01 By Cointelegraph by Ciaran Lyons Cardano founder Charles Hoskinson says he will read the full audit report over a livestream when it is released next month. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

  • Bitcoin 43% social chat dominance suggests ‘key entry point’ ahead

    Bitcoin 43% social chat dominance suggests ‘key entry point’ ahead 2025-07-20 at 07:12 By Cointelegraph by Ciaran Lyons Santiment says the “historic social dominance spike” may indicate another buying opportunity for Bitcoin in the near term. This article is an excerpt from Cointelegraph.com News View Original Source React to this headline:

  • XLM’s price to rocket like XRP, Trump’s big crypto nod: Hodler’s Digest, July 13 – 19

    XLM’s price to rocket like XRP, Trump’s big crypto nod: Hodler’s Digest, July 13 – 19 2025-07-20 at 03:09 By Cointelegraph by Ciaran Lyons Stellar may be setting up more upside after XRP’s recent price surge, US President Donald Trump signed one of the first bills related to crypto, and other news. This article is…

Browse older archives

Scroll to Top