The Sophos Annual Threat Report: Cybercrime on Main Street 2025
Ransomware remains the biggest threat, but old and misconfigured network devices are making it too easy
Similar Posts
US Arrests Army Soldier Over AT&T, Verizon Hacking
US soldier Cameron John Wagenius was arrested and charged over his suspected connection to presidential phone records leaks. The post US Arrests Army Soldier Over AT&T, Verizon Hacking appeared first on SecurityWeek.
Researchers Warn of Sitecore Exploit Chain Linking Cache Poisoning and Remote Code Execution
Bys sThree new security vulnerabilities have been disclosed in the Sitecore Experience Platform that could be exploited to achieve information disclosure and remote code execution. The flaws, per watchTowr Labs, are listed below – CVE-2025-53693 – HTML cache poisoning through unsafe reflections CVE-2025-53691 – Remote code execution (RCE) through insecure deserialization CVE-2025-53694 –
Pittsburgh Regional Transit dealing with ransomware attack that slowed light rail system last week
One unfortunate holiday tradition seems to be that ransomware groups will attack at holiday times when entities are less likely to have full IT support from staff. One attack, however, reportedly started last week. Ed Blazina reports: What Pittsburgh Regional Transit last week thought was a computer glitch that affected rail service has turned out…
Defense Giant General Dynamics Says Employees Targeted in Phishing Attack
General Dynamics says several benefits accounts were hacked after threat actors targeted employees in a phishing campaign. The post Defense Giant General Dynamics Says Employees Targeted in Phishing Attack appeared first on SecurityWeek.
Disney Hacker Who Accessed 1.1 Terabytes of Data Pleads Guilty
Bys sThere’s an update to a previously reported breach claimed by “Nullbulge.” Pirates and Princesses reports: A California resident has pleaded guilty to charges related to hacking a Disney employee’s personal computer, resulting in the theft of more than 1 terabyte of confidential data. Last year, it was reported that a hacker accessed Disney’s files and released…
EncryptHub Targets Web3 Developers Using Fake AI Platforms to Deploy Fickle Stealer Malware
Bys sThe financially motivated threat actor known as EncryptHub (aka LARVA-208 and Water Gamayun) has been attributed to a new campaign that’s targeting Web3 developers to infect them with information stealer malware. “LARVA-208 has evolved its tactics, using fake AI platforms (e.g., Norlax AI, mimicking Teampilot) to lure victims with job offers or portfolio review requests,”…