Marks & Spencer (M&S)
public
–
3 min read
In 2025, Marks & Spencer (M&S) suffered a high-profile cyberattack over Easter, involving ransomware, payment system disruption, and…
TSB
public
–
3 min read
TSB, a UK-based bank, has been impacted by a 55% surge in investment scams, primarily driven by cryptocurrency fraud targeting…
Astral
public
–
4 min read
A critical vulnerability named TARmageddon (CVE-2025-62518) was discovered in the async-tar Rust library and its forks, including tokio-tar, which is…
Scotiabank
public
–
3 min read
Scotiabank, a major financial institution, faces escalating cybersecurity threats as highlighted in the Mexico Cybersecurity Summit 2025. The financial sector,…
Adobe (Adobe Commerce / Magento)
public
–
3 min read
Hackers are actively exploiting CVE-2025-54236 (SessionReaper), a critical improper input validation vulnerability in Adobe Commerce (formerly Magento). The flaw allows…
National Nuclear Security Administration (NNSA)
public
–
4 min read
The National Nuclear Security Administration (NNSA), a U.S. federal agency responsible for nuclear security, was confirmed as one of…
Change Healthcare
public
–
3 min read
Change Healthcare, a critical healthcare technology provider, fell victim to a **SocGholish (FakeUpdates)**-driven cyberattack in early 2025, facilitated by…
LANSCOPE
public
–
3 min read
A critical remote code execution (RCE) vulnerability (CVE-2025-61932, CVSS 9.8) was discovered in LANSCOPE Endpoint Manager (On-Premise Edition, v9.…
Unnamed Russian IT service provider
public
–
3 min read
Chinese state-sponsored threat actor Jewelbug infiltrated a Russian IT provider’s network in early 2025, remaining undetected for five months.…
Envoy Air (MQ)
public
–
3 min read
Envoy Air, a regional subsidiary of American Airlines, confirmed a cybersecurity breach linked to the Clop ransomware group, which exploited…
Adobe
public
–
3 min read
Adobe is facing active exploitation of a critical vulnerability (CVE-2025-54253) in its Adobe Experience Manager (AEM) Forms on JEE (versions…
Microsoft
public
–
3 min read
The Cybersecurity and Infrastructure Security Agency (CISA) identified CVE-2025-59230, a critical privilege escalation vulnerability in Windows Remote Access Connection Manager,…
Explore topics
Authors
