Category: Cybersecurity News
-
Wave of Cyberattacks Targetting MOVEit Transfer Systems
Recent activity indicates a significant increase in scanning and exploitation attempts against Progress Software’s MOVEit Transfer platform, a widely used file-sharing solution used globally. Over the past three months, cybersecurity researchers have observed a sustained surge in malicious activity, suggesting that threat actors are actively probing for vulnerabilities in this widely used file-sharing solution. This…
-
Patches Released for Critical Vulnerabilities in Citrix NetScaler and Cisco ISE
Recent security disclosures have highlighted serious vulnerabilities in two widely used enterprise networking solutions: Citrix’s NetScaler ADC and Cisco’s Identity Services Engine (ISE). These flaws pose significant risks, including potential system disruptions and unauthorized access, prompting urgent updates from both vendors. Critical Flaw in NetScaler ADC Citrix has released an advisory regarding a severe security…
-
Research Shows Risks of AWS Credential Exposure Through Overprivileged Containers in Amazon EKS
Recent security research has uncovered significant risks associated with misconfigured or overly privileged containers running in Amazon Elastic Kubernetes Service (EKS). These misconfigurations can expose sensitive AWS credentials, leading to potential privilege escalation, data breaches, and unauthorized access within cloud environments. Overprivileged Containers Kubernetes has become the backbone of modern cloud applications, enabling automation in…
-
Critical Vulnerability in Meshtastic Mesh Networks Allows Private Message Decryption
A significant cryptographic flaw has been uncovered in Meshtastic, a widely used open-source project that enables secure, off-grid communication through LoRa mesh networks. This vulnerability exposes affected devices to potential decryption of private messages, unauthorized node control, and network hijacking. Meshtastic is designed to facilitate decentralized, private communication in environments where traditional networks are unavailable—such…
-
OpenVPN Driver Vulnerability Poses Denial-of-Service Risk to Windows Systems
A newly discovered security vulnerability in OpenVPN’s Windows driver has raised alarms within the tech community. The flaw exposes systems running certain versions of OpenVPN to denial-of-service (DoS) attacks, potentially causing affected Windows machines to crash. The vulnerability, designated as CVE-2025-50054, exists within OpenVPN’s ovpn-dco-win driver, a component responsible for handling the VPN’s data channel…
-
CoinMarketCap Hit by Supply Chain Attack, Crypto Wallets Compromised
CoinMarketCap, a leading cryptocurrency price tracking site, was recently targeted in a supply chain attack that exposed visitors to a wallet-drainer scam. The attack tricked users into connecting their cryptocurrency wallets, leading to the theft of funds. Earlier this year in January, visitors to CoinMarketCap’s homepage began seeing pop-up prompts asking them to connect their…
-
Historic 7.3 Tbps DDoS Attack Stopped by Cloudflare
Cloudflare faced an extraordinary cyberattack so massive that it set a new global record. The DDoS (distributed denial of service) attack reached a peak of 7.3 terabits per second (Tbps)—a terabit being 1,000 gigabits, or 1 trillion bits of data transmitted per second, far surpassing previous attacks and highlighting just how powerful cyber threats have…
Categories:
Have any comments or suggestions? Feel free to let us know!
