Spyware products from the surveillance consortium Intellexa are still thriving despite extensive US sanctions. This comes as a months-long investigation into a set of highly sensitive documents and other materials leaked from the company has been published by Inside Story, Haaretz and… Read More "Predator Spyware Maker Intellexa Evades Sanctions"
The Louvre has announced plans to overhaul its security infrastructure following a high-profile break-in at the museum’s Apollo Gallery in October that resulted in the theft of the Crown Jewels, valued at €88m ($102.5m). The public entity managing the museum… Read More "Louvre to Bolster Its Security, Issues €57m Public Tender"
CrowdStrike has identified a sophisticated cyber-espionage campaign by Warp Panda targeting North American legal, technology and manufacturing firms to support Chinese government priorities. The previously unknown threat actor exhibits a high level of technical sophistication, advanced operations security (OPSEC) skills… Read More "China-Linked Warp Panda Targets North American Firms in Espionage Camp"
A critical remote code execution vulnerability in React.js has been identified. React.js is a JavaScript library for building fast, interactive user interfaces (UIs) using reusable components. The security researcher Lachlan Davidson disclosed the vulnerability on 29 November 29, 2025, to… Read More "React.js Hit by Maximum-Severity ‘React2Shell’ Vulnerability"
A leading NHS trust has become the latest organization to notify about a data breach linked to its use of Oracle E-business Suite (EBS). Barts Health said in an update on Friday that it is seeking a High Court order… Read More "Barts Health Seeks High Court Ban After Oracle EBS Breach"
The UK’s data protection watchdog has asked the government for urgent answers after a Home Office report revealed racial bias in the retrospective facial recognition (RFR) technology used by police. Deputy information commissioner, Emily Keaney, said in a statement on… Read More "UK ICO Demands “Urgent Clarity” on Facial Recognition Bias Claims"
Just days after the disclosure of the React2Shell critical vulnerability, tracked as CVE-2025-55182, threat actors are actively exploiting the flaw in the wild. The vulnerability carries a CVSS v3.1 score of 10, the highest possible severity rating. Amazon Web Services… Read More "React2Shell Under Active Exploitation by China-Nexus Hackers"
A Russian-speaking, financially motivated threat actor has been observed taking advantage of commercial generative artificial intelligence (AI) services to compromise over 600 FortiGate devices located in 55 countries. That’s according to new findings from Amazon Threat Intelligence, which said it… Read More "AI-Assisted Threat Actor Compromises 600+ FortiGate Devices in 55 Countries"
Portugal has updated its cybercrime law to exempt cybersecurity researchers and ethical hackers from prosecution. The change was made public in the Portuguese Official Journal (Diário da República) on December 4. The amendment, titled “Acts not punishable due to public interest… Read More "Portugal Revises Cybercrime Law to Protect Security Researchers"
A data breach affecting more than 780,000 individuals has been confirmed by Marquis Software Solutions, a Texas-based fintech provider that works with over 700 banks and credit unions across the US. The incident began on August 14, when attackers broke… Read More "Data breach at Marquis Software Solutions affected over 780,000 people"
