Category: Cybersecurity News
-
OpenVPN Driver Vulnerability Poses Denial-of-Service Risk to Windows Systems
A newly discovered security vulnerability in OpenVPN’s Windows driver has raised alarms within the tech community. The flaw exposes systems running certain versions of OpenVPN to denial-of-service (DoS) attacks, potentially causing affected Windows machines to crash. The vulnerability, designated as CVE-2025-50054, exists within OpenVPN’s ovpn-dco-win driver, a component responsible for handling the VPN’s data channel
-
CoinMarketCap Hit by Supply Chain Attack, Crypto Wallets Compromised
CoinMarketCap, a leading cryptocurrency price tracking site, was recently targeted in a supply chain attack that exposed visitors to a wallet-drainer scam. The attack tricked users into connecting their cryptocurrency wallets, leading to the theft of funds. Earlier this year in January, visitors to CoinMarketCap’s homepage began seeing pop-up prompts asking them to connect their
-
Historic 7.3 Tbps DDoS Attack Stopped by Cloudflare
Cloudflare faced an extraordinary cyberattack so massive that it set a new global record. The DDoS (distributed denial of service) attack reached a peak of 7.3 terabits per second (Tbps)—a terabit being 1,000 gigabits, or 1 trillion bits of data transmitted per second, far surpassing previous attacks and highlighting just how powerful cyber threats have
-
Major Insurance Provider Aflac Reports Cybersecurity Incident
Major insurance company Alfac has recently disclosed a cybersecurity incident affecting its U.S. network. This joins several other insurance companies that have also experienced similar cybersecurity breaches. On a recent notice post on their website, they stated identifying suspicious activity within their network and quickly responding to contain the intrusion. Potentially impacted files could contain
-
Critical Linux Vulnerabilities Discovered in libblockdev, udisks Packages
Recent research from Qualys has revealed significant security vulnerabilities affecting many Linux systems, particularly those running openSUSE and SUSE Linux Enterprise. These flaws could allow an attacker with limited access to escalate privileges and gain full control over the system. Given the widespread use of these components, it’s essential for organizations to understand the risks
-
Scammers Are Injecting Fake Phone Numbers Into Official Websites
Cybercriminals are constantly evolving their tactics, and a recent scam has emerged that can trick even cautious users. Security company Malwarebytes has uncovered a method where scammers inject fake phone numbers into well-known websites. These include major sites like Apple, PayPal, Microsoft, Netflix, and others—right within the address bar. This sneaky trick can make malicious
-
Fake Minecraft Mods Used to Steal Gamers’ Data in New Cyberattack Campaign
Minecraft is a beloved game that continues to capture the hearts of millions worldwide. With over 200 million active players each month, it has become one of the most-used and best-selling games in history. For many, a big part of the Minecraft experience comes from mods—user-created modifications that enhance gameplay, fix bugs, improve graphics, and
-
Veeam Patches Critical Security Vulnerabilities in Backup & Replication Update
Veeam Software has released version 12.3.2 of its Backup & Replication platform, including important security patches that resolve several vulnerabilities identified in earlier versions. The recent update addresses three notable vulnerabilities. One critical flaw (tracked as CVE-2025-23121) could allow an authenticated domain user to perform remote code execution on domain-joined backup servers. Another issue (CVE-2025-24286)
Categories:
Have any comments or suggestions? Feel free to let us know!
