Progress Software has announced the identification and resolution of a critical SQL injection vulnerability within MOVEit Transfer, software widely utilized for secure file transfers. Alongside this, the company has addressed two additional high-severity vulnerabilities that also pose significant security risks. The SQL injection vulnerability, designated as CVE-2023-36934, could enable unauthenticated…
In a recent development that recalls the infamous ‘Olympic Destroyer’ cyber attack from the 2018 Winter Olympics, the same group of hackers has emerged once again, this time targeting biological and chemical threat prevention laboratories across Europe and Ukraine, alongside several financial institutions in Russia. The malicious campaign reflects a…
Poland’s Electric Grid Targeted by Russian Wiper Malware: Analysis of Recent Cyberattack On January 13, researchers announced that Poland’s electric grid had been the target of a cyberattack involving wiper malware, with strong indications that the origin of this attack aligns with Russian state-sponsored hackers. This malicious software aims to…
Data Breaches Affecting Millions: A Week of High-Profile Cyber Incidents This past week has seen a surge of high-profile data breaches, significantly endangering the personal and sensitive information of millions of individuals. Among the recent victims are major companies in various sectors: T-Mobile, Patreon, and Scottrade, each experiencing significant cybersecurity…
AI-Based Attacks, Fraud Management & Cybercrime, Governance & Risk Management Also: Non-Human Identities Transforming Security; Insights from the Delinea-StrongDM Acquisition Anna Delaney (annamadeline) • January 23, 2026 . Pictured from left to right: Anna Delaney, Mathew Schwartz, Michael Novinson, and Tom Field This week’s ISMG panel convened four editors to…
Your browser is incompatible | breachspot.com At breachspot.com, we are dedicated to providing critical insights into the evolving landscape of cybersecurity. To optimize user experience, our platform leverages the latest technology advancements, ensuring our content is both fast and accessible. However, your current browser is not compatible with our site.…
On Tuesday, Microsoft announced the release of significant software updates addressing a total of 132 security vulnerabilities, among which are six zero-day flaws that have been actively exploited by cybercriminals. This update reflects a substantial effort to fortify their software against ongoing threats, underlining the vulnerabilities present across multiple platforms.…
Recent warnings from security researchers highlight a particularly insidious phishing technique known as ZeroFont, which enables cybercriminals to evade detection by AI-driven email security systems. This method utilizes hidden characters formatted with a font size of zero, allowing malicious content to blend seamlessly into legitimate communication. The ZeroFont technique involves…
LoopPay Breach Raises Concerns for Samsung’s Payment System Samsung’s reputation has faced scrutiny in recent years; however, the tech giant remains resilient in product innovation. Recently, a report has surfaced regarding a significant cyber breach involving LoopPay, the mobile payment company Samsung acquired for over $250 million in February 2015.…