News
-
Clop-linked web shell targets Windchill data
A purpose-built web shell targeting PTC Windchill can decrypt stored credentials, map engineering repositories, and run additional code while operating inside the application’s own trust boundary.
-
Poland’s old health breach raises reporting questions
Prosecutors have confirmed a separate 2024 incident involving MyDr and Poland’s health-entitlement system, raising questions over why central cyber and data authorities apparently did not know about it.
-
North Korean workers scale fake hiring identities
A North Korean IT-worker cluster used at least 22 fabricated identities and applied to more than 1,100 companies, combining AI, remote access, and human facilitators.
-
France investigates claimed student data theft
France’s Education Ministry is investigating claims that attackers obtained extensive student and teacher records, but the full scope and victim count remain unconfirmed.
-
CameraSwarm compromises 14,500 Dahua cameras
A single operator compromised more than 14,500 Dahua cameras in 35 days, including devices reached through cloud relay infrastructure and persistent access mechanisms.
-
Siemens S7 controllers face active attacks
Government agencies have warned that internet-exposed Siemens S7 programmable logic controllers face an active threat capable of disrupting physical processes across critical infrastructure.
-
Slovakia warns of risks in traffic cameras
Slovakia’s security authority has identified serious remote-access and software-security risks in NERO R-ONE traffic cameras, pushing a public procurement dispute into questions of infrastructure and product assurance.
-
CSDD leadership quits after Latvia data breach
Latvia’s road authority has lost its senior leadership after a breach exposed data linked to 1.2 million people and prompted an investigation into its cybersecurity arrangements.
-
Application risk climbs as software output accelerates
Sonatype research finds enterprise applications are accumulating more serious vulnerabilities even as remediation speeds up and AI-era software creation accelerates sharply.
-
Ukraine claims Wildberries cyberattack
Ukraine’s military intelligence says a cyber operation disrupted Wildberries customer service and payment infrastructure, extending pressure on the Russian retailer beyond recent physical strikes.