Wärtsilä FOS-Onboard, specifically version 5.07.0923.01, has been found to have critical vulnerabilities that could allow attackers to deliver unauthorized updates, execute code, or extract credentials. These vulnerabilities stem from hardcoded cryptographic keys in two components: the deployer-ng Update Controller and the robot testing framework. If exploited, these weaknesses could enable an attacker to impersonate a privileged client. Wärtsilä has stated that while these vulnerabilities are serious, they are not exploitable if the product is installed correctly. A security patch is available for users, who are advised to contact Wärtsilä for its installation. This situation raises concerns for critical infrastructure sectors, particularly in transportation systems worldwide, and emphasizes the need for organizations to implement strong cybersecurity measures.
Articles tagged "Phishing"
Found 513 articles
The article discusses the limitations of current security testing practices, which often focus on individual techniques rather than the broader attack chains that attackers utilize. Security teams are becoming adept at testing specific defenses, like how well an endpoint detection and response (EDR) tool can handle a certain payload or how effective phishing simulations are. However, this approach can miss the bigger picture of how attackers combine various techniques to bypass defenses. The author argues that organizations need to shift their focus from testing isolated techniques to understanding and testing the entire attack chain to better protect themselves against sophisticated threats. This change in perspective could lead to more effective security strategies and a stronger overall defense against cyber attacks.
Infosecurity Magazine
Revolut has confirmed a data breach where an unauthorized individual used a legitimate government email domain to request sensitive customer information. This incident raises concerns about the security of customer data, as it shows how attackers can impersonate trusted entities to gain access to private information. Revolut has not disclosed the exact number of customers affected, but the breach could potentially impact many users who rely on the platform for financial services. The situation is alarming as it highlights the need for companies to strengthen their verification processes when responding to data requests. Customers should remain vigilant about their account security, especially in light of potential phishing attempts that may arise as a result of this breach.
The Hacker News
Microsoft has reported two recent phishing campaigns where attackers exploited third-party email services to send out fraudulent messages. Between August 3 and 5, 2026, more than a million scam emails were dispatched, impersonating CEOs to deceive recipients. These campaigns utilized social engineering tactics focused on passkeys to gain unauthorized access to Microsoft cloud accounts, leading to potential data breaches. As a result, both individuals and organizations using Microsoft cloud services could be at risk of financial fraud and data exfiltration. This incident underscores the ongoing challenges in cybersecurity, particularly in safeguarding sensitive information against increasingly sophisticated phishing attempts.
The article touches on several cybersecurity incidents and trends that are crucial for users and organizations to be aware of. One notable issue is the InjectEave attack, which seems to involve an exploit that allows attackers to bypass phishing detection systems using invisible Unicode characters. This could put many users at risk as they may unknowingly fall victim to phishing attempts. Additionally, a SIM swapper has been sentenced, highlighting the legal consequences of such cybercrimes, which can have devastating effects on individuals by allowing hackers to gain control of their phone numbers. Lastly, a $10 million bounty has been placed on an Iranian cyber official, indicating the high stakes involved in international cybersecurity. Overall, these stories reveal ongoing challenges in the cybersecurity landscape and the need for vigilance among users and organizations alike.
Hackers have compromised the Brevo marketing platform, leading to a significant phishing campaign targeting users of Trezor, BitBox, and CoinTracking. Approximately 347,000 users received these fraudulent emails, which were designed to deceive recipients into revealing sensitive information. This incident highlights the risks associated with third-party services and how breaches can affect multiple organizations and their customers. Users of these cryptocurrency services are advised to be vigilant and cautious about any unsolicited communications they receive, especially those requesting personal or financial information. The situation serves as a reminder for companies to prioritize security measures to protect customer data from such attacks.
Trezor, a cryptocurrency hardware wallet provider, recently reported that phishing attacks have affected its users following a data breach at Brevo, a third-party email service provider. The attackers targeted approximately 347,000 email addresses, with about 2,500 users having clicked on a malicious link in the phishing emails. This incident raises concerns about the security of customer data and the effectiveness of existing phishing defenses. Users are advised to be cautious and verify communications from Trezor and other services to avoid falling victim to similar scams. The situation underscores the ongoing risks associated with email-based attacks in the cryptocurrency space.
Help Net Security
A recent report from Pistachio has raised concerns about how companies evaluate their resilience against phishing attacks. Instead of focusing solely on the percentage of employees who click on simulated phishing emails, the report suggests that organizations should also consider other factors such as credential submission rates. The analysis included data from 648 organizations and over 123,000 users over a year. This broader approach to measuring phishing resilience is crucial because it can provide a clearer picture of an organization's vulnerability to real-world attacks. By understanding how employees interact with phishing attempts beyond just clicks, companies can better prepare themselves against actual phishing threats.
A serious vulnerability has been identified in the Orthanc DICOM Server, affecting versions prior to 1.13.0. This flaw allows an authenticated remote attacker to exploit an integer overflow when the server decodes specially crafted PNG or JPEG images, potentially leading to a crash of the Orthanc process and causing a denial-of-service condition. The issue has been assigned CVE-2026-87020 and has a high severity score of 8.1 according to the CVSS metrics. Users of Orthanc DICOM Server worldwide, particularly in healthcare sectors, are at risk and are strongly urged to update to version 1.13.0 to mitigate the threat. No active exploitation of this vulnerability has been reported so far, but organizations should remain vigilant and take appropriate defensive measures.
AVEVA Pipeline Integrity Monitor has several vulnerabilities that could be exploited by attackers to gain unauthorized access to sensitive information or execute arbitrary code. The affected versions include those up to 2025_SP1_P1_build_7.1.9580.8513. If exploited, these vulnerabilities could allow attackers to decrypt sensitive project files, reverse engineer user passwords, and perform unauthorized read operations. AVEVA recommends that users of the affected software apply the 2025 SP1 P2 Security Update and migrate project files to mitigate these risks. This situation is particularly concerning as it affects critical infrastructure sectors and could have significant security implications for organizations worldwide.
ST Engineering iDirect has reported multiple vulnerabilities affecting its iQ-Series terminals, specifically the Evolution, 3315, and 9-Series models running versions 4.5.2.1 or earlier. These weaknesses could allow unauthorized access to sensitive device information and lead to denial-of-service conditions. Attackers could exploit these flaws to impersonate terminals on satellite networks, launch cross-site request forgery attacks, or escalate privileges due to inadequate authentication measures. Users are strongly advised to update their systems to version 4.5.3.0 or newer to mitigate these risks, while also implementing security best practices such as restricting access to management interfaces and monitoring for unusual activity.
NextGen Healthcare's Mirth Connect software has several serious vulnerabilities that could be exploited by attackers to extract sensitive data or disrupt services. Specifically, versions 4.7.1 and earlier are affected by SQL injection and XML external entity (XXE) flaws. These vulnerabilities could allow unauthorized users to execute arbitrary SQL commands, leading to the potential exposure of stored credentials and denial-of-service conditions. NextGen Healthcare has advised users to upgrade to version 4.7.2 or later to mitigate these risks. Given that Mirth Connect is widely used in the healthcare sector, these security issues pose a significant threat to patient data integrity and system availability.
AdaptHealth, a healthcare company, has confirmed that a cyberattack in July exposed the personal information of 4.1 million individuals. The breach was linked to the ShinyHunters threat group, known for targeting various organizations. While the specific details about the type of data compromised have not been disclosed, such breaches in the healthcare sector raise significant concerns about patient privacy and data security. AdaptHealth's incident underscores the ongoing risks that healthcare companies face from cybercriminals. Users whose data may have been compromised should remain vigilant for potential phishing attempts or other scams that could arise from this breach.
A vulnerability has been identified in the CareCam Pro IP Cameras, specifically affecting the ANJIA AJL33PC0801 model. This vulnerability, designated as CVE-2026-85083, arises from the use of hard-coded credentials for bootloader authentication. Attackers with physical access to the camera can exploit this weakness to gain privileged access, potentially allowing them to modify firmware and configurations, resulting in full control of the device. The issue has been noted as a medium severity threat with a CVSS score of 6.8. Users are advised to take precautions, as CareCam has not yet responded to the Cybersecurity and Infrastructure Security Agency (CISA) regarding remediation efforts.
A group of cybercriminals appears to be targeting Brazilian government and educational websites to set up a network of phishing sites disguised as gambling platforms. By compromising these official sites, they create a reverse-proxy network that misleads users into thinking they are visiting legitimate pages. This incident raises concerns about the security of government infrastructure and the potential for widespread phishing attacks that could affect unsuspecting users. The implications are serious, as these phishing sites could steal personal information and financial data from users who fall victim to the deception. Authorities may need to enhance their cybersecurity measures to prevent further exploitation of their systems.