Information Security News Blog
Discord has confirmed that attackers gained access to the personal data of some users after breaching one of its third-party contractors responsible for customer support services. The incident affected individuals who had previously contacted...
A group calling itself Scattered LAPSUS$ Hunters has reemerged after months of silence and multiple arrests of its alleged members. On a newly launched leak site, the attackers published a list of approximately forty...
Researchers at StrikeReady uncovered a targeted campaign exploiting a zero-day in the Zimbra Collaboration Suite (ZCS) — a widely used open-source mail platform deployed by numerous governments and enterprises. Tracked as CVE-2025-27915, the flaw...
Oracle has warned of a zero-day vulnerability in E-Business Suite, designated CVE-2025-61882, that permits unauthenticated remote arbitrary code execution. The flaw is already being actively exploited by the Clop group in data-theft operations, making...
The LayerX team has disclosed the mechanics of a novel attack dubbed CometJacking, which exploits the AI-enabled Comet browser from Perplexity. Comet embeds an assistant with access to email, calendar, and other linked services;...
The hacker group Confucius, active in South Asia since at least 2013, has intensified malicious operations against Pakistani organizations. Fortinet researchers documented a fresh wave of intrusions leveraging two malware families — WooperStealer and...
Researcher RyotaK of GMA Flatt Security discovered a serious vulnerability in the Unity game engine—tracked as CVE-2025-59489—which allows a co-resident application on the same device to inject additional command-line parameters into Unity games, creating...
In a complex attack chain that blends malicious advertising, DNS-based control, and multi-stage delivery schemes, researchers at Infoblox uncovered the operations of a cybercriminal group known by the alias Detour Dog. The group orchestrates...
AI-Powered CAPTCHA Solver This project is a Python-based command-line tool that uses large multimodal models (LMMs) like OpenAI’s GPT-4o and Google’s Gemini to automatically solve various types of CAPTCHAs. It leverages Selenium for web...
The Raspberry Pi Foundation has released a new version of its operating system — Raspberry Pi OS Trixie, based on the latest Debian 13 “Trixie” release. As always, the launch coincides with the debut...
Earlier this week, we reported on a cyberattack targeting the Japanese brewing giant Asahi, which brought nearly all of its production facilities in Japan to a halt. The aftermath was swift — as the...
Linux creator Linus Torvalds has once again publicly criticized developers—this time drawing attention to text and code formatting in Rust. Just a day earlier, he had stated that big-endian support for RISC-V would not...