A staggering misconfiguration within an attacker’s own offensive infrastructure fortuitously exposed nearly the entire exploitation chain orchestrated against a prominent Thai internet service provider. Hunt.io analysts discovered an unprotected, openly accessible server maintained by...
A Japanese maritime transport conglomerate has encountered a significant data breach following the compromise of its internal fuel procurement architecture. Unauthorized actors gained access to the system utilized by the NYK Line group and,...
Kontigo, a nascent enterprise bolstered by the Y Combinator accelerator and a formidable $22 million capital injection in 2025, has succumbed to yet another cybernetic incursion, necessitating a temporal suspension of its platform. The...
U.S. and Australian cybersecurity authorities have confirmed that hackers are already exploiting a newly disclosed vulnerability in MongoDB-based data storage systems. The issue surfaced over the holiday period and quickly drew expert attention, as...
A critical vulnerability has been discovered in MongoDB that allows a remote attacker to access uninitialized server memory without any form of authentication. Assigned the identifier CVE-2025-14847, the flaw carries a CVSS score of...
Fortinet has warned administrators that real-world attacks are once again exploiting the vulnerability FG-IR-19-283 (CVE-2020-12812), first disclosed in July 2020. Under certain FortiGate configurations, the flaw allows attackers to bypass two-factor authentication and log...
The Iranian threat group MuddyWater has intensified its cyber-espionage operations with the deployment of a new malicious program known as UDPGangster. According to Fortinet’s FortiGuard Labs, the attacks targeted Turkey, Israel, and Azerbaijan. The...
The NAFFCO company—renowned for large-scale fire-safety projects throughout the Middle East—has found itself at the center of intense discussion following a dark-web post alleging a massive data breach. The incident has drawn widespread attention...
A widespread infection of outdated ASUS routers has become the focal point of a new covert campaign that quietly unfolded over the past six months, compromising tens of thousands of devices across the globe....
Major battery manufacturers are increasingly coming under pressure from extortionist groups, and new reports confirm that criminal interest in this sector continues to grow. This time, the incident affected an LG division that supplies...
A message has appeared on the dark-web site operated by the Everest group, in which the actors claim responsibility for breaching Under Armour’s infrastructure and stealing a vast trove of data. The post concerning...
Somali authorities have confirmed a serious breach affecting the nation’s electronic visa system. After reports surfaced of an intrusion that placed the personal data of more than 35,000 applicants at risk, Minister of Security...
