The Breach News

Masque Attack: New iOS Vulnerability Enables Hackers to Substitute Legitimate Apps with Malware

New iOS Vulnerability Exposes Devices to Cyber Attacks: The Masque Attack Recent findings have shed light on a new vulnerability within Apple’s iOS operating system, creating a potential threat to millions of iPhones and iPads. Security experts at FireEye have disclosed that this flaw allows cybercriminals to exploit user actions,…

Read MoreMasque Attack: New iOS Vulnerability Enables Hackers to Substitute Legitimate Apps with Malware

3BB Attacker Exploits MeshCentral Backdoor for Root Access, Compromising Subscriber Credentials

Cyber Intrusion Discovered at Major Thai Broadband Provider 3BB In a significant cybersecurity incident, an attacker has infiltrated the network of 3BB, one of Thailand’s largest broadband service providers, maintaining remote access to internal systems through an authorized management tool known as MeshCentral. The breach was uncovered by threat intelligence…

Read More3BB Attacker Exploits MeshCentral Backdoor for Root Access, Compromising Subscriber Credentials

Star Blizzard Strikes 100+ Organizations Using Phishing and RedFlick Tactics

Microsoft Threat Intelligence has reported on the recent phishing and malware delivery activities conducted by Star Blizzard, a Russian state-sponsored threat group also known as Callisto Group or SEABORGIUM. This group is linked to Centre 18 of the Russian Federal Security Service, as noted by the U.S. Cybersecurity and Infrastructure…

Read MoreStar Blizzard Strikes 100+ Organizations Using Phishing and RedFlick Tactics

Windows Phone 8.1 Compromised

Vulnerability Discovered in Windows Phone 8.1: A Potential Breach Threat In a recent disclosure, cybersecurity researchers have identified a significant vulnerability in Microsoft’s Windows Phone 8.1 operating system, further emphasizing the ongoing risks associated with outdated mobile software. This development comes on the heels of Microsoft acknowledging a critical security…

Read MoreWindows Phone 8.1 Compromised

MikroTrick Chain: How Attackers Can Seize Control of MikroTik Routers Without Passwords or SSH Keys

Security Vulnerability in MikroTik RouterOS Exposes Devices to Administrative Takeover Recent developments reveal significant security vulnerabilities in MikroTik’s RouterOS that allow attackers to gain complete administrative control of routers exposed to the internet, without needing a password or SSH key. This vulnerability chain, dubbed “MikroTrick” by CERT Polska, combines two…

Read MoreMikroTrick Chain: How Attackers Can Seize Control of MikroTik Routers Without Passwords or SSH Keys

Microsoft Issues Urgent Out-of-Band Update to Address Kerberos Vulnerability MS14-068

Microsoft has issued an urgent security patch aimed at rectifying a critical vulnerability affecting all supported versions of its Windows Server software. This emergency update was announced today, just one week following the company’s regular monthly security updates. In November 2014, Microsoft released a series of 16 security patches during…

Read MoreMicrosoft Issues Urgent Out-of-Band Update to Address Kerberos Vulnerability MS14-068

CISA Warns of Global Exploitation of Two Critical Vulnerabilities in Citrix NetScaler

On September 27, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced the inclusion of two significant vulnerabilities affecting Citrix NetScaler ADC and Gateway in its Known Exploited Vulnerabilities (KEV) catalog. This decision was influenced by credible reports indicating active exploitation of these flaws in the wild. The vulnerabilities…

Read MoreCISA Warns of Global Exploitation of Two Critical Vulnerabilities in Citrix NetScaler

Billions of Android Devices at Risk of Privilege Escalation, Excluding Android 5.0 Lollipop

Security Flaw in Older Android Versions Risks Privilege Escalation Attacks A significant security vulnerability identified in the Android mobile operating system, particularly affecting versions prior to 5.0, has recently been patched in Android 5.0 Lollipop. This flaw, known as CVE-2014-7911, poses a threat to potentially every Android device utilizing these…

Read MoreBillions of Android Devices at Risk of Privilege Escalation, Excluding Android 5.0 Lollipop

Hackers Exploit NeedyMantis for Sustained Access in Compromised Networks

Hackers Leverage NeedyMantis Malware for Extended Network Infiltration Microsoft has unveiled the use of a malware variant known as NeedyMantis, employed by hackers to secure prolonged access to compromised networks, according to a recent technical analysis. This malware has been detected in a limited number of targeted attacks against entities…

Read MoreHackers Exploit NeedyMantis for Sustained Access in Compromised Networks