CyberNews A major healthcare company’s sensitive patient data has been compromised in a cyberattack, leaving over 1,400 cancer patients vulnerable to potential identity theft and medical record tampering. Novocure, a global oncology firm specializing in non-invasive electromagnetic field therapy for cancer tumors, revealed that its network was breached in mid-August, exposing the private information of employees … Read more
A Sophisticated Cyberattack Targets Virtualizor VPS Management Software A highly coordinated cyberattack has targeted the Virtualizor virtual private server (VPS) management software, leaving a small number of users vulnerable to potential security breaches. The attackers exploited a Border Gateway Protocol (BGP) hijacking attack to redirect update requests for Virtualizor to malicious servers, allowing them to … Read more
Iranian hackers have been using a sophisticated tactic to deliver cross-platform Remote Access Trojans (RATs) to unsuspecting victims, with the attackers posing as recruiters offering coding tests. This brazen approach has allowed them to successfully compromise multiple organizations across various industries, exploiting vulnerabilities in human psychology and technical systems alike. The modus operandi of these … Read more
A sophisticated malware campaign has been uncovered, targeting unpatched iPhones and exploiting a vulnerability in their package management system. At least 13 malicious packages have been discovered on Packagist, a popular PHP library repository, which are designed to steal cryptocurrency wallet seeds from unsuspecting iPhone users. The attack begins when an iPhone user installs one … Read more
A devastating data breach has struck cancer treatment company Novocure, exposing sensitive information of over 1,400 US cancer patients and an undisclosed number of employees. The attack, which occurred in mid-August, highlights the ongoing vulnerability of healthcare organizations to cyber threats. Novocure, a global oncology company with operations in multiple continents, is known for its … Read more
A malicious update to the Virtualizor VPS management software has been delivered to a small number of installations after hackers hijacked Border Gateway Protocol (BGP) routing for its update infrastructure. The attack, which occurred between August 28 and 30, involved a BGP hijacking that enabled the threat actor to divert traffic from Softaculous software update … Read more
A disturbing trend has emerged in the world of cybersecurity, where threat actors are no longer focused on launching innovative and complex attacks. Instead, they’re shifting their attention towards creating repeatable and reliable exploits that can be easily replicated across multiple targets. This shift in strategy highlights a concerning reality: identity exposure is becoming an … Read more
Iranian hackers have been using a sophisticated tactic to deliver malicious software, exploiting vulnerabilities in coding test platforms to gain unauthorized access to target devices. The group’s modus operandi involves posing as recruiters or HR personnel, luring unsuspecting individuals into participating in online coding tests that promise lucrative job opportunities. These seemingly legitimate coding tests … Read more
A sophisticated campaign of malware has been uncovered, targeting unpatched iPhones and exploiting a vulnerability in their package manager, Packagist, to steal sensitive information from cryptocurrency wallet users. The attack, which was discovered on August 25th, affects any iPhone running iOS 14 or earlier that has not been updated to the latest version. The malicious … Read more
Critical Langflow Vulnerability Exploited in the Wild, Threat Actors Targeting Users Globally A critical remote code execution (RCE) vulnerability in the AI low-code platform Langflow has been exploited by threat actors, with over 360 attempts detected by vulnerability intelligence firm VulnCheck in just a few days. The security defect, tracked as CVE-2026-0768, allows attackers to … Read more