On June 20, Aflac notified the SEC of unauthorized access to its network: On June 12, 2025, Aflac Incorporated, a Georgia corporation (the “Company”), identified unauthorized access to its network. The Company promptly initiated its cybersecurity incident response protocols and believes that it contained the intrusion within hours. The Company’s business remains operational, and its…
Veeam has released patches to address a critical security flaw impacting its Backup software that could allow an attacker to execute arbitrary code on susceptible systems. The vulnerability, tracked as CVE-2025-23114, carries a CVSS score of 9.0 out of 10.0. “A vulnerability within the Veeam Updater component that allows an attacker to utilize a Man-in-the-Middle…
Sophos has been named as one of the top employers in British Columbia, Canada for the ninth year running.
Dev.ua reports: Hacken, which searches for vulnerabilities in DeFi, NFT, and blockchain applications and produces security reports, itself encountered a major cybersecurity vulnerability that affected the mining of its HAI tokens on the Ethereum and BNB Chain networks. This led to a 98% collapse in the value of HAI. This was reported by The Crypto Times, which notes that a hacker who exploited the Hacken vulnerability…
The threat actor known as EncryptHub exploited a recently-patched security vulnerability in Microsoft Windows as a zero-day to deliver a wide range of malware families, including backdoors and information stealers such as Rhadamanthys and StealC. “In this attack, the threat actor manipulates .msc files and the Multilingual User Interface Path (MUIPath) to download and execute…
Arianna Prothero and Lauraine Langreo report: Schools stand to lose vital cybersecurity support from the federal government as the Trump administration takes dramatic steps to shrink its size, and the Education Department suspends a major cybersecurity support initiative. […] Education Week has confirmed that the U.S. Department of Education, at the behest of Homeland Security,…
There’s an update to the City of Columbus, Ohio cyberattack by Rhysida that affected 500,000 residents but also resulted in the city trying to muzzle a whistleblower who tried to inform the community of the true extent of the breach. Jordan Laird reports: Days before the one-year anniversary of the cyberattack that temporarily crippled Columbus’ computer…
