CyberNews The US government has issued a stern warning about Iranian hackers targeting critical infrastructure organizations, including those that rely on industrial control systems (ICS) from leading vendors such as Siemens, Schneider Electric, and Rockwell Automation. The attackers have been using sophisticated tactics to gain access to operational technology (OT) devices, putting the safety of people … Read more
Brazilian Banking Trojan Continues to Spread in Portugal, Exploiting Language Barrier A notorious banking Trojan, Lampion, has been causing trouble for Portuguese organizations since its discovery around 2019. Despite being nearly a decade old, this malware remains a threat, with researchers at Acronis observing ongoing attacks against businesses in Portugal. The fact that the attackers … Read more
A recent attack on my own wireless services account exposed significant weaknesses in how organizations treat identity as a one-time event rather than something that must be continuously evaluated throughout the customer journey. The incident involved a coordinated assault that combined social engineering, identity impersonation, stolen personal information, SIM swapping, session hijacking, and unauthorized account … Read more
A recent discovery by web and browser security firm Guardio has shed light on a serious vulnerability in Adobe’s popular Chrome extension, Acrobat. The exploit, dubbed HermeticReader, allowed attackers to silently steal users’ WhatsApp chats and contacts without their knowledge or consent. The vulnerable extension, installed on approximately 329 million browsers, was found to have … Read more
Palo Alto Networks’ Latest Acquisition Aims to Give Businesses a Complete Picture of Their Digital Experience In a move that could revolutionize the way companies monitor their digital operations, Palo Alto Networks has announced its intent to acquire Embrace, a provider of user-focused observability. This acquisition is part of a broader push by Palo Alto … Read more
Tens of millions of accounts compromised in devastating data breaches at Suno and Paidwork A massive cyberattack has struck two major companies, leaving tens of millions of user records vulnerable. The breach, which occurred in November 2025, targeted AI music generator Suno and gig-work platform Paidwork. Hackers stole source code and sensitive user information from … Read more
A devastating ransomware attack has struck Japanese frozen-food supplier and logistics firm Nichirei, disrupting the supply chain for thousands of clients, including major franchises like Kentucky Fried Chicken. The cyberattack, attributed to Russia-linked group RansomHouse, has left a trail of shortages and warnings from affected businesses. Nichirei’s operations were severely impacted by the attack, which … Read more
A recent attack on my own wireless services account has left me shaken and serves as a stark reminder of the limitations of traditional identity verification methods. The incident involved a combination of social engineering, identity impersonation, stolen personal information, SIM swapping, session hijacking, and unauthorized account changes. Although the attackers ultimately failed to achieve … Read more
A Vulnerability in Adobe’s Chrome Extension Exposed 300 Million Users to WhatsApp Data Theft A critical vulnerability in a widely used Chrome extension has been patched by Adobe after researchers discovered it could be exploited to steal users’ WhatsApp chats, contacts, and account details. The flaw, known as HermeticReader, affected the Adobe Acrobat Chrome extension, … Read more
Palo Alto Networks Embarks on Major Observability Expansion with Embrace Acquisition In a significant move to bolster its Observability platform, Palo Alto Networks has announced plans to acquire Embrace, a provider of user-focused observability solutions. This acquisition marks the latest development in the company’s ambitious efforts to deliver a unified view of digital experiences across … Read more