Home - Cybercory

Breaking News: Supply-Chain Breach Hits Palo Alto Networks and Zscaler via Salesloft’s Drift App

September 4, 2025 0

A widespread supply-chain cyberattack has unfolded, centering on OAuth tokens stolen from the Salesloft - Drift application - a third-party AI-powered sales tool that integrates...

Securing Critical Infrastructure: Insights from Evgeny Kurtukov at Dubai Cyber Show

Podcast & Cyber Talks 3 days ago

Virtual private networks (VPNs)

Coordinated Brute-Force Campaign Targets Fortinet SSL VPN and FortiManager Services

On 3 August 2025, threat intelligence firm GreyNoise detected an unprecedented surge in brute-force attempts against Fortinet SSL VPNs - over 780 unique IPs...

Breaking news:

Podcast & Cyber Talks

Securing Critical Infrastructure: Insights from Evgeny Kurtukov at Dubai Cyber Show

At the recent 100 CISO Summit in Dubai, Ouaissou...

Advanced Persistent Threat

Salt Typhoon & UNC4841: Silent Push Uncovers New Domains in Global Espionage Campaign

Silent Push threat analysts have uncovered dozens of new...

Saintynet Certification Training Flyer 2025

Saintynet Certification Training Flyer 2025 (1)

Saintynet Certification Training Flyer 2025 (2)

Stay on top of what's going on with our subscription deal!

Worldwide

AI & Cybersecurity

Breaking News: Supply-Chain Breach Hits Palo Alto Networks and Zscaler via Salesloft’s Drift App

A widespread supply-chain cyberattack has unfolded, centering on OAuth...

National Security

Iran-Nexus Spear-Phishing Masquerades as Omani MFA to Target Global Governments

In August 2025, Dream’s Cyber Threat Intelligence (CTI) agents...

AI & Cybersecurity

Ooredoo and Qatar Airways Sign MoU to Establish Qatar as Regional AI, Cloud & Cybersecurity Innovation Hub

On 30 August 2025, Ooredoo and Qatar Airways signed...

Application Security

Malicious Versions of Nx NPM Packages Published: Developers Urged to Update Immediately

Cybersecurity researchers have discovered that malicious versions of the...

Africa

EFCC Arrests 37 Suspected Internet Fraudsters in Wukari, Taraba State

On 27 August 2025, the Economic and Financial Crimes...

AI & Cybersecurity

PromptLock: ESET Uncovers First Known AI-Powered Ransomware

ESET researchers published on 27 August 2025 that they...

Banking & Cybersecurity

Hook Version 3 Emerges: Banking Trojan Gains Ransomware Overlays, NFC Tricks, Screen-Streaming – Enterprise Security at Risk

On 25 August 2025, Zimperium’s zLabs disclosed the release...

Africa

Nigeria Deports 42 Foreign Cybercriminals After Historic EFCC Raid; 150 More to Follow

On 18 August 2025, the Nigerian Immigration Service, in...

Middle East

PipeMagic Resurfaces: Kaspersky and BI.ZONE Report New Backdoor Activity in GCC and Latin America

On 19 August 2025, Kaspersky and BI.ZONE disclosed the...

Blockchain & Crypto Security

Google Play Enforces Stricter Global Licensing Rules for Cryptocurrency Apps

Google Play has introduced new, jurisdiction-specific licensing requirements for...

Patch

Microsoft Patches 111 CVEs in August 2025 Security Update, Including Critical Azure OpenAI Flaw

On 13 August 2025, Microsoft released its monthly security...

Virtual private networks (VPNs)

Coordinated Brute-Force Campaign Targets Fortinet SSL VPN and FortiManager Services

On 3 August 2025, threat intelligence firm GreyNoise detected...

Europe

Dutch NCSC Confirms Advanced Zero-Day Attacks on Citrix NetScaler: Multiple Critical Organizations Breached

On 11 August 2025, the Dutch National Cyber Security...

Africa

Nigeria Convicts 21 Foreign Hackers, Fines Each ₦1 Million, Orders Deportation in Six Days

On 8 August 2025, the Federal High Court in...

Phishing & Solution

The Cost of a Call: How Voice Phishing Campaigns Escalated into Salesforce Data Extortion

A sophisticated cybersecurity campaign leveraging voice phishing (vishing) has...

Featured Interviews

#Interview: Navigating Security Challenges in the IoT Era: Insights from Industry...

Read The Interview

More...

#Interview: Navigating the Intersection of PCI DSS Compliance and Cyber Law:...

Read The Interview

More...

#Interview: AI and Machine Learning in Zero Trust: Enhancing Threat Detection...

Read The Interview

More...

Middle East

View All

Ooredoo and Qatar Airways Sign MoU to Establish Qatar as Regional AI, Cloud & Cybersecurity Innovation Hub

Ouaissou DEMBELE - September 1, 2025

On 30 August 2025, Ooredoo and Qatar Airways signed a landmark Memorandum of Understanding to establish Qatar as...

PipeMagic Resurfaces: Kaspersky and BI.ZONE Report New Backdoor Activity in GCC and Latin America

Ouaissou DEMBELE - August 20, 2025

On 19 August 2025, Kaspersky and BI.ZONE disclosed the reemergence of the PipeMagic backdoor, a malware strain first...

Oman’s Civil Aviation Authority Boosts Cybersecurity Awareness at Muscat and Salalah Airports

August 4, 2025

Jordan’s Cyber Incidents Soar: NCC Reports 6,758 Attacks in 2024

August 1, 2025

CPX’ Latest Whitepaper for Securing OT: Trust, Collaboration, and the Future of Industrial Cyber Defense

July 14, 2025

UAE Employees Surpass European Peers in Cyber Readiness, Cohesity Study Reveals

June 24, 2025

Iran’s State TV Hijacked to Broadcast Protest Videos Satellite Hack amid Rising Tensions

June 21, 2025

Jordan’s NCSC Greenlights 2025-2028 National Cybersecurity Strategy to Elevate Regional Digital Security

June 20, 2025

AI & Cybersecurity

View All

Breaking News: Supply-Chain Breach Hits Palo Alto Networks and Zscaler via Salesloft’s Drift App

Ouaissou DEMBELE - September 4, 2025

A widespread supply-chain cyberattack has unfolded, centering on OAuth tokens stolen from the Salesloft - Drift application - a third-party AI-powered sales...

Ooredoo and Qatar Airways Sign MoU to Establish Qatar as Regional AI, Cloud & Cybersecurity Innovation Hub

September 1, 2025

PromptLock: ESET Uncovers First Known AI-Powered Ransomware

August 28, 2025

MTN South Africa Launches Nation’s First Re-Usable Biometric Digital ID Across All Stores

August 8, 2025

CVE‑2025‑7847: Arbitrary File Upload in AI Engine Puts 100K+ WordPress Sites at Risk of RCE

August 2, 2025

The Top 10s

View All

Fortressing Your Business Data: Top 10 Most Secure ERP Systems in 2024

Ouaissou DEMBELE - June 11, 2024

In today's data-driven business landscape, Enterprise Resource Planning (ERP) software plays a critical role. It manages core functionalities like finance, inventory, human...

The Digital Fortress: Top 10 Most Secure Operating Systems in 2024

June 10, 2024

Guarded Gates: Top Best 10 Secure Email Services in 2024

June 10, 2024

Securing the Gateway: Top Best 10 Web Application Firewalls (WAFs) in 2024

June 8, 2024

Safeguarding Your Digital Assets: Top 10 Data Backup Solutions in 2024

June 7, 2024

Africa

View All

Africa

EFCC Arrests 37 Suspected Internet Fraudsters in Wukari, Taraba State

Africa

African Authorities Dismantle Massive Cybercrime Networks in INTERPOL-Led Crackdown

Africa

Nigeria Deports 42 Foreign Cybercriminals After Historic EFCC Raid; 150 More to Follow

America

View All

America

Chinese National Sentenced to Four Years for Deploying “Kill Switch” on Employer’s Network

America

SIM-Swapper “Scattered Spider” Hacker Sentenced to 10 Years, Ordered to Pay $13 Million

Asia

View All

Advanced Persistent Threat

Singapore Under Siege: UNC3886 Launches Cyber‑Espionage Strikes on Critical Infrastructure

Asia

Taiwan NSB Warns of Critical Cybersecurity Risks in China-Made Mobile Apps

Asia

Malaysian Home Minister’s WhatsApp Hacked via Foreign VPN: Police Launch Cybercrime Probe

How To

View All

How To

How to identify fake social media profiles? A Guide to Unmasking the Imposters & Identifying Fake Social Media Profiles

How To

How to avoid social engineering scams on social media?: The Social Siren Song

How To

How To Avoid Online Shopping Scams?: The Siren Song of Savings

How To

How to protect your credit card information online?: Fort Knox for Your Wallet

What Is

View All

DoS & DDoS

Under Siege: Understanding DoS and DDoS Attacks in Cybersecurity

What Is

What Is VPN? Tunneling Through the Web: A Comprehensive Guide

What Is

What Is A Computer Virus? The Invisible Invaders: A Comprehensive Guide

What Is

What Is Ransomware? Held Hostage in the Digital Age: Understanding the Threat

Europe

Data Breach

Berlin Charges Alleged German “Anonymous” Member for Major Rosneft Cyberattack

Ouaissou DEMBELE - August 29, 2025

Europe

Dutch NCSC Confirms Advanced Zero-Day Attacks on Citrix NetScaler: Multiple Critical Organizations Breached

Ouaissou DEMBELE - August 12, 2025

View All

Oceania

America

US Deports Notorious Australian Hacker After Landmark Cybercrime Conviction

DENVER/ADELAIDE – United States Immigration and Customs Enforcement (ICE)...

Data Breach

Australia’s Privacy Alarm Bells: A Deep Dive into the Notifiable Data Breaches Report (July-December 2024)

In an era where cyber threats are escalating with...

Banking & Finance

ASIC Sues FIIG Securities Over Cybersecurity Failures Leading to Data Theft

The Australian Securities and Investments Commission (ASIC) has launched...

Education System

Cybersecurity Breach at the University of Notre Dame Australia: Investigation Underway

The University of Notre Dame Australia is currently investigating...

Australia

Bunnings Faces Privacy Backlash Over Facial Recognition Technology Use

Bunnings Group Limited, a prominent retail chain in Australia,...

Hacked - Breached

Breached

Tenable and Qualys Disclose Impact from Salesloft Drift Supply-Chain Breach

AI & Cybersecurity

Breaking News: Supply-Chain Breach Hits Palo Alto Networks and Zscaler via Salesloft’s Drift App

Breached

Bouygues Telecom Cyberattack Exposes 6.4 Million Customers Second Telecom Breach in France This Month

Breached

Air France & KLM Hit in Supply-Chain CRM Breach; ShinyHunters Behind Salesforce Attacks on Global Giants

America

Allianz Life Suffers Data Breach via External Hack: Consumer Data at Risk

View All

Zero-Day

Europe

Dutch NCSC Confirms Advanced Zero-Day Attacks on Citrix NetScaler: Multiple Critical Organizations Breached

Patch

Apple Urges Immediate Update as July 2025 Security Patches Address Multiple Zero‑Days

Patch

Chrome Under Active Exploit: Google Patches High-Risk Zero-Day in V8 Engine (CVE-2025-5419)

Website Security

Unpatched Zero-Day in TI WooCommerce Wishlist Plugin Exposes Over 100K Sites to RCE Risk

Cyberespionage Spying

Marbled Dust Exploits Zero-Day in Output Messenger to Spy on Kurdish Targets: Inside a Sophisticated Regional Espionage Campaign

View All

Cryptocurrencies

Blockchain & Crypto Security

Google Play Enforces Stricter Global Licensing Rules for Cryptocurrency Apps

Application Security

Securing Kubernetes: Understanding and Mitigating Threats to Containerized Environments

Advanced Persistent Threat

Trojanized Messaging Apps and Budget Android Devices: A Perfect Storm for Cryptocurrency Theft

Banking & Finance

MorphoBlue Frontend Vulnerability Exploited for $2.6 Million: A Wake-Up Call for DeFi Security

Blockchain & Crypto Security

Triada Returns with a Vengeance: Preinstalled Trojan Targets Cryptocurrency, Messenger Accounts, and Phone Calls

View All

Cloud Security

AI & Cybersecurity

Ooredoo and Qatar Airways Sign MoU to Establish Qatar as Regional AI, Cloud & Cybersecurity Innovation Hub

Application Security

Microsoft Patches Critical Exchange Hybrid Vulnerability Allowing Cloud Privilege Escalation

Cloud Security

Attackers Unleash TeamFiltration: Active Account Takeover Campaign Hits Over 80,000 Users Across Entra ID Ecosystems

Advanced Persistent Threat

APT41 Unmasked: Chinese Cyber-Espionage Group Uses Google Calendar for Covert Attacks

Application Security

Securing Kubernetes: Understanding and Mitigating Threats to Containerized Environments

View All

Ransomware

AI & Cybersecurity

PromptLock: ESET Uncovers First Known AI-Powered Ransomware

Africa

African Authorities Dismantle Massive Cybercrime Networks in INTERPOL-Led Crackdown

Advanced Persistent Threat

New Charon Ransomware Adopts Earth Baxia APT Techniques to Target Enterprises

Ransomware

Muddled Libra Rebounds: Cybercrime Group Now Faster, Farther-Reaching, and More Impactful in 2025

America

US Sanctions Russia-Linked Bulletproof Hosting Provider Aeza Group for Enabling Ransomware and Infostealer Operations

View All

CPX’ Latest Whitepaper for Securing OT: Trust, Collaboration, and the Future of Industrial Cyber Defense

The UAE-based cybersecurity leader CPX has released a groundbreaking whitepaper, "Securing Operational Technology with Trust and Collaboration" (July 2025), urging a global rethink of...

Technology & Telecom

NVIDIA Warns of Rowhammer GPU Risk: Activating ECC on A6000 and Enterprise GPUs Essential

NVIDIA has published a Rowhammer Security Notice (updated 9 July 2025) in response to customer concerns following new research that demonstrated a practical Rowhammer-style memory‑bit‑flip exploit-dubbed...

Banking & Finance

GMX Suffers Massive $42M DeFi Hack: A Critical Wake‑Up Call for Decentralized Exchanges

On 9 July 2025, the decentralized perpetual exchange GMX-operating on Arbitrum V1-was robbed of approximately $42 million in crypto assets from its GLP liquidity pool,...

Advanced Persistent Threat

macOS.ZuRu Resurfaces via Trojanized Termius App Using Modified Khepri C2 Beacon

On 10 July 2025, cybersecurity researchers uncovered a renewed campaign of the macOS.ZuRu backdoor, this time embedded within a doctored version of the popular...

Banking & Finance

Fake News for Real Scams: Inside the Global Threat of Baiting News Sites and Crypto Investment Fraud

In July 2025, Bahrain-based cybersecurity firm CTM360 released a bombshell report exposing the alarming global rise of Baiting News Sites (BNS) fraudulent news platforms...

America

US Sanctions Russia-Linked Bulletproof Hosting Provider Aeza Group for Enabling Ransomware and Infostealer Operations

The US Department of the Treasury has sanctioned Aeza Group - a Russia-based bulletproof hosting (BPH) provider - and four associated entities and individuals...

Law Enforcement

Ransomware Gang Hunters International Shuts Down and Offers Free Decryption Keys

The ransomware gang Hunters International announced on 3 July 2025 that it is shutting down its operations and offering free decryption keys to previously...

America

How a $2.7K Bribe Enabled a $140 Million PIX Theft from Brazilian Banks

In a dramatic cyber heist on 30 June 2025, hackers paid just R$15,000 (~$2,760) for insider credentials at C&M Software then orchestrated Brazil's largest digital banking...

Breached

Telefónica Hit with Threat: 106 GB Data Leak Warning by Hellcat Hacker

A hacker known as “Rey,” affiliated with the Hellcat ransomware group, claims to have stolen 106 GB of internal data from Spanish telecom giant Telefónica...

Asia

Taiwan NSB Warns of Critical Cybersecurity Risks in China-Made Mobile Apps

Taiwan’s National Security Bureau (NSB) has flagged five popular Chinese-made mobile apps-including TikTok, Weibo, WeChat, RedNote, and Baidu Cloud-as posing significant cybersecurity risks, citing...

Africa

Nigerian Hacker Dupes U.S. President Trump’s 2025 Inauguration Fund in Brazen Cyber Heist

LAGOS, Nigeria - 10 June 2025 In a stunning breach of political and digital security, a Nigerian national has been implicated in a highly...

Advanced Persistent Threat

macOS NimDoor Malware: DPRK Hackers Target Web3 and Crypto Platforms with Nim-Based Precision

North Korean threat actors have launched a sophisticated macOS malware campaign targeting Web3 and cryptocurrency companies using a rare Nim-based backdoor known as NimDoor....

Technology & Telecom

CVE‑2025‑20309: Cisco Unified CM Exposes Root via Static SSH Credentials

Cisco disclosed a 10.0 CVSS-critical vulnerability (CVE‑2025‑20309) in its Unified Communications Manager (Unified CM) and Session Management Edition (SME) on 2 July 2025, enabling...

Phishing & Solution

PDFs: Portable Documents or Perfect Phishing Vectors?

Cybersecurity professionals are sounding the alarm: PDF attachments are increasingly leveraged in sophisticated phishing campaigns. Cisco Talos’ July 2, 2025 investigation reveals how threat actors use...

America

U.S. Treasury Sanctions Aeza Group Bulletproof Russian Bulletproof Hosting Provider in Major Cybercrime Crackdown

On 1 July 2025, the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) sanctioned Aeza Group, a Russia‑based bulletproof hosting service, for enabling...

Browser & Cybersecurity

Google Urgently Patches CVE‑2025‑6554 Zero‑Day in Chrome 138 Stable Update

On 26 June 2025, Google rapidly deployed a Stable Channel update (Chrome 138) to address CVE‑2025‑6554, a high‑severity type‑confusion vulnerability in the V8 JavaScript engine, actively...

Password Security

ALERT: FBI Warns Scattered Spider Is Now Targeting Airlines with Social Engineering Attacks

What happened, why it matters, why now:The FBI has issued a rare airline-sector alert after observing the cybercriminal group Scattered Spider pivoting to target...

Data Breach

French Police Arrest Five Key Operators Behind BreachForums Data-Theft Platform

On 25 June 2025, France’s specialist cybercrime unit (BL2C) detained five French nationals accused of administering BreachForums, a notorious global data-theft marketplace. This operation marks a...

Africa

Cybercriminals Weaponized Open-Source Tools in Sustained Campaign Against Africa’s Financial Sector

Since mid-2023, a cybercriminal cluster dubbed CL‑CRI‑1014 has been targeting financial institutions across Africa using open-source tools like PoshC2 and Classroom Spy exploiting them...

Remote Access

Critical TeamViewer Remote Management Flaw Allows SYSTEM‑Level File Deletion

A high‑severity vulnerability, CVE‑2025‑36537, has been identified in TeamViewer Remote Management for Windows-allowing local, unprivileged users to delete files with SYSTEM-level privileges via MSI...

1...345...70 Page 4 of 70

- Gain full access to our premium content

- Never miss a story with active notifications

- Browse free from up to 5 devices at once

Patched

Patch

Microsoft Patches 111 CVEs in August 2025 Security Update, Including Critical Azure OpenAI Flaw

On 13 August 2025, Microsoft released its monthly security...

Application Security

Microsoft Patches Critical Exchange Hybrid Vulnerability Allowing Cloud Privilege Escalation

On 6 August 2025, Microsoft released a critical security...

Patch

Apple Urges Immediate Update as July 2025 Security Patches Address Multiple Zero‑Days

Apple has rolled out a major security update on...

View All

Bug Bounty

Bug Bounty Bonanza: WazirX Launches Program After $230 Million Cyberattack

In the ever-changing landscape of cybersecurity, the Indian cryptocurrency...

Bug Bounty

Why Your Company Needs a Bug Bounty Program: A Proactive Approach to Cybersecurity

In today's ever-evolving digital landscape, cybersecurity threats are a...

Bug Bounty

Big Bucks for Bugs: Google’s $10 Million Bug Bounty Award and Lessons for Responsible Disclosure

In the ever-evolving battle against cybercrime, bug bounty programs...

View All

ISC/SCADA Security

National Security

Cybercrime Surge, State-Sponsored Faketivists, and Evolving OT Threats: Key Insights from 2025H1

Forescout’s newly released 2025H1 Threat Review (5 August 2025)...

Advanced Persistent Threat

Singapore Under Siege: UNC3886 Launches Cyber‑Espionage Strikes on Critical Infrastructure

Singapore is currently facing ongoing cyber-espionage attacks by the...

Middle East

CPX’ Latest Whitepaper for Securing OT: Trust, Collaboration, and the Future of Industrial Cyber Defense

The UAE-based cybersecurity leader CPX has released a groundbreaking...

View All

IAM

Africa

FABMISR Deploys SailPoint IAM Tool with Hemaya IT, Strengthening Cybersecurity and Digital Governance in Egypt

On 19 August 2025, First Abu Dhabi Bank Misr...

Access Control Systems

MTN South Africa Launches Nation’s First Re-Usable Biometric Digital ID Across All Stores

On 8 August 2025, MTN South Africa announced the...

Access Control Systems

HPE Issues Emergency Patch for Critical StoreOnce Vulnerabilities Enabling Remote Authentication Bypass and Code Execution

Hewlett Packard Enterprise (HPE) has released urgent security patches...

View All

cybercory.comcybercory.com

Cybercory Magazine

Cybercory.com serves as a platform for promoting, motivating, and educating its audience on cybersecurity matters, contributing to a more secure digital environment. Cybercory is a part of Sainttly Group.

Popular:

Breaking news:

Featured Interviews

.tdi_194{margin-bottom:10px!important}#Interview: Navigating the Intersection of PCI DSS Compliance and Cyber Law:...

.tdi_218{margin-bottom:10px!important}#Interview: AI and Machine Learning in Zero Trust: Enhancing Threat Detection...

Cybercory Magazine

Latest

Popular

Sitemap

#Interview: Navigating the Intersection of PCI DSS Compliance and Cyber Law:...

#Interview: AI and Machine Learning in Zero Trust: Enhancing Threat Detection...