Warrington Worldwide reports: Newly released figures from Data Breach Claims UK have highlighted growing concerns about data security in ambulance services, as emergency responders are increasingly exposed to cyber risks and information-handling failures. Data obtained by the company shows that North West Ambulance Service NHS Trust has recorded almost 400 data breach incidents over the…
The maintainers of the nx build system have alerted users to a supply chain attack that allowed attackers to publish malicious versions of the popular npm package and other auxiliary plugins with data-gathering capabilities. “Malicious versions of the nx package, as well as some supporting plugin packages, were published to npm, containing code that scans…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical security flaw impacting Adobe Experience Manager to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerability in question is CVE-2025-54253 (CVSS score: 10.0), a maximum-severity misconfiguration bug that could result in arbitrary code execution.
Cybersecurity researchers have disclosed details of a new campaign that uses WhatsApp as a distribution vector for a Windows banking trojan called Astaroth in attacks targeting Brazil. The campaign has been codenamed Boto Cor-de-Rosa by Acronis Threat Research Unit. “The malware retrieves the victim’s WhatsApp contact list and automatically sends malicious messages to each contact…
Over on SuspectFile, Marco A. De Felice (@amvinfe) considers the troubling use of injunctions, SLAPP suits, and superinjunctions that prohibit the press from performing its duty to inform the public on matters of importance. The topic was back in the news this week after a superinjunction obtained by the U.K. Ministry of Defence to block…
Mayor Melvin Carter said a hacker group on Monday posted 43 gigabytes of stolen data taken from server of St. Paul Parks and Rec Department. The InterLock ransomware group claims responsibility for the attack and leak. Rob Olson reports: For the second day, a steady stream of St. Paul employees streamed in and out of……
In yet another piece of research, academics from Georgia Institute of Technology and Purdue University have demonstrated that the security guarantees offered by Intel’s Software Guard eXtensions (SGX) can be bypassed on DDR4 systems to passively decrypt sensitive data. SGX is designed as a hardware feature in Intel server processors that allows applications to be…
