Balancer
public
–
2 min read
Hackers exploited a vulnerability in Balancer, a decentralized finance (DeFi) protocol, stealing over $120 million in cryptocurrency, with at least…
Co-op
public
–
3 min read
In 2025, Co-op, a major UK retail chain, fell victim to a high-profile cyberattack that resulted in significant financial and…
Docker
public
–
3 min read
Docker was affected by CVE-2025-62725, a critical path traversal vulnerability in Docker Compose (fixed in v2.40.2) that allowed…
Marks & Spencer (M&S)
public
–
3 min read
In 2025, Marks & Spencer (M&S) suffered a high-profile cyberattack over Easter, involving ransomware, payment system disruption, and…
TSB
public
–
3 min read
TSB, a UK-based bank, has been impacted by a 55% surge in investment scams, primarily driven by cryptocurrency fraud targeting…
Astral
public
–
4 min read
A critical vulnerability named TARmageddon (CVE-2025-62518) was discovered in the async-tar Rust library and its forks, including tokio-tar, which is…
Scotiabank
public
–
3 min read
Scotiabank, a major financial institution, faces escalating cybersecurity threats as highlighted in the Mexico Cybersecurity Summit 2025. The financial sector,…
Adobe (Adobe Commerce / Magento)
public
–
3 min read
Hackers are actively exploiting CVE-2025-54236 (SessionReaper), a critical improper input validation vulnerability in Adobe Commerce (formerly Magento). The flaw allows…
National Nuclear Security Administration (NNSA)
public
–
4 min read
The National Nuclear Security Administration (NNSA), a U.S. federal agency responsible for nuclear security, was confirmed as one of…
Change Healthcare
public
–
3 min read
Change Healthcare, a critical healthcare technology provider, fell victim to a **SocGholish (FakeUpdates)**-driven cyberattack in early 2025, facilitated by…
LANSCOPE
public
–
3 min read
A critical remote code execution (RCE) vulnerability (CVE-2025-61932, CVSS 9.8) was discovered in LANSCOPE Endpoint Manager (On-Premise Edition, v9.…
Unnamed Russian IT service provider
public
–
3 min read
Chinese state-sponsored threat actor Jewelbug infiltrated a Russian IT provider’s network in early 2025, remaining undetected for five months.…