Nigerian Communication Commission Orders Telecoms to Report Cyber Threats Within 4 Hours

Cybersecurity researchers have disclosed details of a new Android remote access trojan (RAT) called Fantasy Hub that’s sold on Russian-speaking Telegram channels under a Malware-as-a-Service (MaaS) model. According to its seller, the malware enables device control and espionage, allowing threat actors to collect SMS messages, contacts, call logs, images, and videos, as well as intercept,…

Jonathan Greig reports: A popular Russian bulletproof hosting service provider named Media Land was sanctioned by the U.S. Treasury and international partners on Wednesday for its alleged support of ransomware gangs and other cybercriminal operations. The St. Petersburg-based company provides hackers with access to IP addresses, servers and domains that are used to spread malware,……

Cybersecurity researchers have disclosed a cross-site scripting (XSS) vulnerability in the web-based control panel used by operators of the StealC information stealer, allowing them to gather crucial insights on one of the threat actors using the malware in their operations. “By exploiting it, we were able to collect system fingerprints, monitor active sessions, and –…

Steve Alder writes: Several dermatology practices have recently announced data breaches following an attack on their management company. The number of attacks reported this year by dermatology practices suggests they are being targeted by one or more threat actors. In May 2025, DermCare Management, a Florida-based company that provides support services for dermatologists and dermatology…

Zack Whittaker reports: Meta has fixed a security bug that allowed Meta AI chatbot users to access and view the private prompts and AI-generated responses of other users. Sandeep Hodkasia, the founder of security testing firm AppSecure, exclusively told TechCrunch that Meta paid him $10,000 in a bug bounty reward for privately disclosing the bug…

Adobe has released patches for a high-severity ColdFusion vulnerability for which proof-of-concept (PoC) code exists. The post Adobe Patches ColdFusion Flaw at High Risk of Exploitation appeared first on SecurityWeek.