CyberNews A Venezuelan national has been handed a record federal prison term of 8 years for his role in a sophisticated ATM jackpotting scheme that caused millions of dollars in losses across the United States. Juan Manuel Gouveia-Aguilera, 27, pleaded guilty to bank fraud, bank burglary, and cyber-enabled fraud charges after his involvement in the high-tech … Read more
A massive update has been released for the Spring application development framework, addressing a staggering 91 vulnerabilities that could have allowed attackers to compromise enterprise applications. The patch is crucial for developers and organizations using Spring, as it mitigates potential threats ranging from low-severity issues to critical remote code execution flaws. Spring, an open-source framework … Read more
CISA Sounds Alarm on Widely Exploited Oracle WebLogic Vulnerability A critical vulnerability in Oracle’s WebLogic servers has left thousands of organizations exposed to cyber attacks, prompting CISA to issue a high-priority alert. The flaw, known as CVE-2026-21962, can be exploited by hackers without authentication, allowing them to gain remote code execution and potentially take control … Read more
Cybersecurity experts are sounding the alarm about a serious vulnerability in Oracle’s WebLogic platform, which is currently being actively exploited by hackers. The flaw, dubbed CVE-2023-21707, allows unauthenticated attackers to access sensitive data and potentially take control of vulnerable systems. The issue lies in Oracle’s implementation of the “Cross-Domain Privilege Escalation” (CDPE) feature, which enables … Read more
As AI continues to transform the way we develop and use software applications, the threat landscape is evolving at an alarming rate. Attackers are leveraging AI and other technologies to rapidly identify, exploit, and patch vulnerabilities, leaving organizations struggling to keep up. In just eight years, the average time it takes for attackers to weaponize … Read more
A major private equity firm has fallen victim to a sophisticated social engineering attack that exposed sensitive personal information. Apollo Global Management, which manages over $1 trillion in assets, has disclosed a data breach that compromised names, contact details, and Social Security numbers of its clients. The breach is believed to have been carried out … Read more
Uber Fined $1 Billion Over Automated Account Suspensions Dutch data protection authorities have slapped ride-hailing giant Uber with a nearly $1 billion fine for using automated software to suspend driver accounts without human oversight. The decision marks the fourth time the company has faced penalties from European regulators over its handling of sensitive data. At … Read more
CISOs Face Double Standard in Performance Evaluation and Business Value Contribution A double standard exists when it comes to evaluating the performance of Chief Information Security Officers (CISOs). During recruitment, potential CISOs are typically expected to possess a strong technical background, extensive security experience, and leadership skills. However, once they take on the role and … Read more
A Notorious Hackers’ Group Targeted ReliaQuest, but the Impact Was Minimal, According to the Company Cybersecurity firm ReliaQuest has confirmed that it was targeted by hackers affiliated with the notorious ShinyHunters group. The attackers attempted to gain unauthorized access to ReliaQuest’s systems using a sophisticated social engineering tactic. However, in a rare instance of good … Read more
Uber Fined Nearly $1 Billion by Dutch Regulators Over Automated Suspensions of Driver Accounts Dutch data protection authorities have slapped a massive fine on Uber, worth nearly $1 billion, for using automated software to suspend driver accounts without human review. The ride-hailing company is accused of violating the EU’s General Data Protection Regulation (GDPR), which … Read more