The Breach News

Transforming AI into Business Value: A Webinar for Enterprises.

Brought to you by Red Hat 60 mins Generative AI is revolutionizing how businesses enhance productivity, streamline operations, and elevate customer experiences. However, many organizations face obstacles in translating innovative concepts into tangible results. The multitude of available models, tools, and associated risks can create uncertainty about how to proceed…

Read MoreTransforming AI into Business Value: A Webinar for Enterprises.

PolarEdge Botnet Targets Cisco and Other Vulnerabilities to Compromise ASUS, QNAP, and Synology Devices

A newly uncovered malware campaign has been identified, targeting edge devices from notable manufacturers including Cisco, ASUS, QNAP, and Synology. This campaign, named PolarEdge, has been active since at least late 2023, as reported by French cybersecurity firm Sekoia. The attackers are deploying a backdoor that exploits a critical vulnerability…

Read MorePolarEdge Botnet Targets Cisco and Other Vulnerabilities to Compromise ASUS, QNAP, and Synology Devices

Critical Vulnerability in Ingress NGINX Controller Enables Authentication-Free RCE

Security Vulnerabilities Discovered in Ingress NGINX Controller, Potentially Exposing Over 6,500 Kubernetes Clusters A suite of five significant security vulnerabilities has been identified within the Ingress NGINX Controller for Kubernetes. These weaknesses could lead to unauthorized remote code execution, jeopardizing the security of more than 6,500 clusters that are currently…

Read MoreCritical Vulnerability in Ingress NGINX Controller Enables Authentication-Free RCE

Forecasting Cybercrime and Security Trends for 2023

As cybercriminals continuously evolve with emerging technologies and shifting regulatory landscapes, organizations must proactively strengthen their cybersecurity protocols. This report examines anticipated trends in cybercrime for 2023 and outlines strategies for enhancing security measures. Growing Threat of Digital Supply Chain Attacks The digitization of supply chains introduces significant security vulnerabilities.…

Read MoreForecasting Cybercrime and Security Trends for 2023

Silver Fox APT Deploys Winos 4.0 Malware in Cyber Attacks Targeting Taiwanese Entities

A significant cybersecurity threat has emerged targeting enterprises in Taiwan, characterized by a new strain of malware known as Winos 4.0. This malware is disseminated through phishing emails disguising themselves as communications from the National Taxation Bureau of Taiwan. The malicious campaign was first identified last month by Fortinet’s FortiGuard…

Read MoreSilver Fox APT Deploys Winos 4.0 Malware in Cyber Attacks Targeting Taiwanese Entities

New High-Risk Security Vulnerabilities Discovered in VMware Tools and CrushFTP — Proof of Concept Available

Broadcom has recently issued critical security updates to mitigate a serious vulnerability in VMware Tools for Windows. Recognized as CVE-2025-22230, this flaw poses a significant risk as it allows for potential authentication bypass, earning it a CVSS score of 7.8. The vulnerability arises from inadequate access control measures within the…

Read MoreNew High-Risk Security Vulnerabilities Discovered in VMware Tools and CrushFTP — Proof of Concept Available