CyberNews Skullcandy Dime 3 Earbuds Exposed to Bluetooth Hijacking Vulnerability A recent discovery by the Carnegie Mellon University CERT Coordination Center (CERT/CC) has shed light on a critical vulnerability affecting Skullcandy’s popular Dime 3 wireless earbuds. The issue, tracked as CVE-2025-20701, allows attackers in close proximity to connect to the device without requiring user interaction or … Read more
A massive healthcare company, AdaptHealth, has just confirmed that a July cyberattack exposed sensitive information for an astonishing 4.1 million people. The breach, attributed to the notorious ShinyHunters threat group, highlights the growing concern of data security in the healthcare sector. AdaptHealth provides essential medical devices and services to patients across all 50 US states, … Read more
A High-Severity Cisco FMC Vulnerability Has Been Actively Exploited in Attacks Cisco has confirmed that a critical vulnerability tracked as CVE-2026-20079 in its Secure Firewall Management Center (FMC) software is being exploited by attackers. The flaw, which allows unauthenticated remote access to execute scripts and commands with root privileges, has been identified as having a … Read more
Cybersecurity researchers have uncovered a shocking trend in recent attacks, revealing that four separate spy groups have utilized the same exploit kit to target Chrome and Windows systems within a week. This alarming development highlights the escalating threat landscape and raises concerns about the ease with which sophisticated attackers can compromise even the most secure … Read more
U.S. authorities have taken a significant step in disrupting a lucrative online scam marketplace, freezing over $52.8 million in cryptocurrency assets linked to Xinbi Guarantee. This operation highlights the ongoing cat-and-mouse game between cybercrime operators and law enforcement agencies. At its core, this story is about the intersection of identity exposure, active attack paths, and … Read more
**Security Teams’ Euphoria Over MFA May Be Misplaced** For years, security teams have been implementing multi-factor authentication (MFA) as a crucial layer of protection against account takeovers. However, recent attacks suggest that this approach may be creating a false sense of security. While MFA has indeed raised the bar for attackers, it’s also inadvertently pushed … Read more
Veradigm Faces Patient Data Breach After Ransomware Gang Claims Attack Healthcare technology company Veradigm has disclosed a data breach affecting thousands of its customers, including hospitals and clinics across the United States. The breach is attributed to a ransomware gang that claims to have stolen sensitive patient information, including Social Security numbers and personal details. … Read more
US Government Warns of Widespread Theft of AI Model Tokens by Chinese Firms A joint advisory from top US cybersecurity and intelligence agencies has revealed a coordinated effort by six Chinese AI companies to extract billions of tokens from frontier AI models. The affected American firms include Anthropic, OpenAI, Google, and xAI, with the attackers … Read more
A coordinated assault on web applications has left multiple organizations scrambling to patch vulnerabilities after four separate spy groups were found to be utilizing a shared Chrome and Windows exploit kit within a week. This alarming trend highlights the ease with which attackers can leverage existing tools to breach sensitive systems, underscoring the importance of … Read more
A massive online scam has been disrupted, with US authorities freezing over $52.8 million in cryptocurrency linked to Xinbi Guarantee, a notorious marketplace for fake financial guarantees and stolen identities. The operation, which allowed scammers to sell fake identities and exploit vulnerable individuals, has been brought to its knees by a coordinated effort between law … Read more