Autoparts giant LKQ is the latest victim to confirm it has been hit by a cyber-attack targeting Oracle E-Business Suite (EBS). The NASDAQ-listed company filed a notification to the Maine Attorney General’s Office that the personal information of more than… Read More "US Autoparts Maker LKQ Confirms Oracle EBS Breach"
ISACA has been appointed by the US Department of Defense (DoD) as the global credentialing authority for the Cybersecurity Maturity Model Certification (CMMC) program, ensuring defense contractors meet strict cybersecurity standards. The DoD introduced CMMC in 2020 to make sure companies… Read More "ISACA Named Global Credentialing Authority for DoD’s CMMC Program"
Die kontextuellen Daten, die SIEM-Lösungen liefern, sind eine grundlegende Komponente moderner Security-Stacks. PeopleImages.com – Yuri A | shutterstock.com Protokoll-Daten zu auditieren, zu überprüfen und zu managen, ist alles andere als eine glamouröse Aufgabe – aber ein entscheidender Aspekt, um ein… Read More "SIEM-Kaufratgeber"
A novel attack technique that undermines a common safety mechanism in agentic AI systems has been detailed by security researchers, showing how human approval prompts can be manipulated to execute malicious code. The issue, observed by Checkmarx researchers, centers on… Read More "New “Lies-in-the-Loop” Attack Undermines AI Safety Dialogs"
A security flaw in the Motors WordPress theme has been disclosed that could allow logged-in users with minimal privileges to gain full control of affected websites. The issue involves an arbitrary file upload vulnerability that allows Subscribers and higher-level users… Read More "Motors WordPress Vulnerability Exposes Sites to Takeover"
HMRC has warned UK taxpayers finalizing their Self Assessment filings that it has already received tens of thousands of reports related to suspected scams. The UK tax office revealed that it received more than 135,500 reports since February 2025, including 4800… Read More "HMRC Warns of Over 135,000 Scam Reports"
A newly observed variant of the BeaverTail malware has been tied to hackers associated with North Korea. The findings come from Darktrace’s latest The State of Cybersecurity report, which links BeaverTail activity to DPRK threat clusters assessed to be part of… Read More "New BeaverTail Malware Variant Linked to Lazarus Group"
North Korea has now amassed over $6.7bn in crypto after targeting the industry over the past decade, with the hermit nation stealing a record $2bn+ in 2025, according to Chainalysis. The blockchain analysis specialist revealed the news in the first… Read More "North Korea Steals Over $2bn in Crypto in 2025"
A surge in phishing campaigns abusing Microsoft’s OAuth device code authorization flow has been observed with multiple threat clusters using the technique to gain unauthorized access to Microsoft 365 accounts. According to a new advisory published today by Proofpoint, both… Read More "OAuth Device Code Phishing Campaigns Surge Targets Microsoft 365"
The FBI has led an operation that seized websites and infrastructure linked to E-Note, a cryptocurrency exchange that allegedly enabled cybercrime. In a statement published on December 17, the US Attorney’s Office for the Eastern District of Michigan said the… Read More "FBI Disrupts Russian Crypto Laundering Hub Enabling Cybercrime"
