The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has escalated attention to a critical vulnerability affecting the Craft content management system (CMS) by incorporating it into its Known Exploited Vulnerabilities (KEV) catalog. This action is prompted by confirmed instances of active exploitation associated with this flaw. Identified as CVE-2025-23209, this…
The U.S. Department of Homeland Security (DHS) has issued an urgent alert regarding significant security flaws found in Emergency Alert System (EAS) encoder and decoder devices. Such vulnerabilities, if not addressed, may allow malicious entities to generate fake emergency alerts across various broadcasting mediums, including television, radio, and cable networks.…
In a significant legal development, U.S. prosecutors recently filed criminal charges against Thalha Jubair, a 19-year-old from the U.K., in connection with his alleged involvement as a central figure in Scattered Spider, a notorious cybercrime organization implicated in extortion schemes totaling over $115 million. These accusations, which emerged as Jubair…
Critical Vulnerabilities Found in Supermicro Motherboards Expose Servers to Exploits Recent security findings have revealed significant vulnerabilities in servers powered by motherboards sold by Supermicro. These high-severity flaws enable attackers to remotely install malicious firmware that operates prior to the system’s operating system, resulting in infections that are challenging to…
Aikido Security Expands Reach with Acquisition of Allseek and Haicker Aikido Security has recently announced its acquisition of Allseek and Haicker, two firms known for their advancements in cybersecurity solutions. This move is significant as it positions Aikido to strengthen its offerings in an increasingly competitive landscape. The integration of…
Cisco has disclosed that a Chinese threat actor, identified as Salt Typhoon, successfully infiltrated major U.S. telecommunications companies by exploiting a known vulnerability labeled CVE-2018-0171 and utilizing stolen login credentials. This targeted operation reflects the sophisticated methods employed by adversaries focusing on critical infrastructure. According to Cisco Talos, the group…
Meta Platforms, the parent company of Facebook, has reported the dismantling of two sophisticated cyber-espionage campaigns targeting individuals across South Asia, utilizing its platforms as channels for malware dissemination. The operations, conducted by groups identified as Bitter APT and Transparent Tribe, showcase evolving tactics aimed at exploiting social media for…
Critical Infrastructure Security, Cyberwarfare / Nation-State Attacks, Fraud Management & Cybercrime U.S. Secret Service Disrupts Network of Telecom Devices Targeting Government Officials Chris Riotta (@chrisriotta) • September 23, 2025 Equipment seized by the U.S. Secret Service prior to the United Nations General Assembly. (Image: U.S. Secret Service) The U.S. Secret…
The recent discovery of a SIM farm operation in New York has highlighted a long-standing issue within the cybercrime landscape. SIM farms, which consist of large collections of SIM cards that can be remotely managed, have been exploited by criminals for various illicit activities, including spam distribution, swatting incidents, and…
