Latest Cybersecurity Threats

Real-time threat intelligence from trusted sources

The article discusses a critical vulnerability in OpenAI's Codex CLI, identified as CVE-2025-61260, which allows for command execution. This vulnerability poses a significant risk to developers, as it could be exploited to facilitate various attacks. Immediate attention is required to mitigate potential threats stemming from this issue.

Impact: OpenAI Codex CLI
Remediation: To mitigate the risk associated with CVE-2025-61260, users should apply any available patches for the Codex CLI and review their command execution permissions. Additionally, implementing strict access controls and monitoring for unusual activity can help reduce the likelihood of exploitation.
Read Original

The article discusses how a noisy ransomware attack at Russian companies inadvertently revealed a long-term espionage foothold by a stealthier threat actor. This situation highlights the complexities of cybersecurity, where one breach can expose another, potentially more dangerous, vulnerability. The findings emphasize the need for organizations to remain vigilant against both overt and covert threats.

Impact: Russian companies, ransomware groups, espionage actors
Remediation: N/A
Read Original

The UK Information Commissioner’s Office (ICO) has initiated an investigation into the mobile gaming sector to ensure compliance with the Children’s Code, which aims to protect children's privacy and data. This investigation highlights the increasing scrutiny of mobile games and their practices regarding children's data protection, signaling potential regulatory actions in the future.

Impact: Mobile games targeting children
Remediation: Develop and implement compliance strategies with the Children’s Code, including data protection measures for children.
Read Original

The Kaspersky Security Bulletin for 2025 provides insights into various cyberthreats observed from November 2024 to October 2025, leveraging anonymized data from Kaspersky users. This report highlights trends and statistics that can inform users about the evolving landscape of cybersecurity threats.

Impact: N/A
Remediation: N/A
Read Original

Europol has shut down Cryptomixer, a cryptocurrency mixing service used to launder cybercrime proceeds, and seized $29 million in Bitcoin. Since its inception in 2016, Cryptomixer facilitated the mixing of over EUR 1.3 billion in Bitcoin, highlighting the ongoing challenges in combating cryptocurrency-related crimes.

Impact: Cryptomixer, Bitcoin
Remediation: N/A
Read Original

The article discusses a new cyber-espionage campaign by the Russian-speaking group Tomiris, which is targeting government and diplomatic entities in CIS member states and Central Asia. This campaign poses a significant cybersecurity threat, highlighting the ongoing risks to sensitive government communications and operations in the region.

Impact: Government and diplomatic entities in CIS member states and Central Asia
Remediation: Implementing robust cybersecurity measures, including network monitoring, threat detection systems, and employee training on phishing and social engineering attacks.
Read Original

The Inc ransomware gang has claimed responsibility for a cyberattack that led to the shutdown of the CodeRED Emergency Alert Platform, indicating a significant breach involving sensitive subscriber data. This incident raises concerns about the security of emergency communication systems and the potential misuse of stolen data.

Impact: CodeRED Emergency Alert Platform
Remediation: Organizations using the CodeRED platform should assess their security measures, implement stronger access controls, and monitor for unusual activity. It is also advisable to notify affected subscribers and review data protection policies.
Read Original

Michael Clapsis, an Australian man, was sentenced to over seven years in prison for conducting Wi-Fi attacks at airports and on flights, where he stole sensitive data from unsuspecting users. This case highlights the ongoing threat of Wi-Fi vulnerabilities in public spaces, emphasizing the importance of securing personal information while using public networks.

Impact: Public Wi-Fi networks at airports and on flights
Remediation: Users should avoid using public Wi-Fi for sensitive transactions, employ VPNs for encryption, and ensure devices are updated with the latest security patches.
Read Original

The article discusses a significant cybersecurity breach at South Korean online retailer Coupang, affecting approximately 33.7 million users. Experts warn that similar incidents could occur in the U.S. if companies do not adequately secure their databases, highlighting the ongoing vulnerability of online retailers to cyber threats.

Impact: Coupang user database, potentially affecting personal information of 33.7 million customers.
Remediation: Companies should implement robust database security measures, including regular audits, encryption, and access controls to prevent similar breaches.
Read Original
Coupang Data Breach Affects All 33.7 Million South Korean Accounts

Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More

Coupang has confirmed a significant data breach affecting 33.7 million users in South Korea, which has resulted in the exposure of personal information including names, contact details, and order history. The investigation into the breach is ongoing, highlighting the potential risks associated with large-scale data leaks and the importance of user data protection.

Impact: Coupang user accounts
Remediation: Users should monitor their accounts for unusual activity and change passwords. Additionally, it is advisable to enable two-factor authentication where available.
Read Original

Authorities have dismantled Cryptomixer, a cryptocurrency mixing service that facilitated the laundering of over $1.5 billion in Bitcoin since its inception in 2016. The operation, which resulted in the seizure of $28 million in Switzerland, highlights the ongoing efforts to combat cybercrime and the use of cryptocurrency in illicit activities.

Impact: Cryptomixer service, Bitcoin
Remediation: N/A
Read Original
Actively Exploited

The threat operation Tomiris has enhanced its tactics to covertly target Russian and Central Asian government officials and diplomats, indicating a significant escalation in cyber espionage activities. This development highlights the ongoing risks to national security and the potential for sensitive information to be compromised.

Impact: Russian and Central Asian government officials and diplomats
Remediation: N/A
Read Original

A significant cybersecurity threat has been identified, with over 17,000 secrets exposed through public repositories on GitLab Cloud, which is nearly three times the number leaked from Bitbucket. This incident highlights the vulnerabilities associated with public code repositories and the potential risks to sensitive information.

Impact: GitLab Cloud, Bitbucket
Remediation: Organizations should review their public repositories for sensitive information and implement stricter access controls. Regular audits and the use of secret scanning tools are recommended to prevent future exposures.
Read Original
PreviousPage 204 of 219Next