The Breach News

Warning: Over 700,000 DrayTek Routers Vulnerable to Hacking Due to 14 New Flaws

Recent investigations by cybersecurity experts at Forescout Vedere Labs have uncovered extensive vulnerabilities in routers produced by DrayTek, placing both residential and enterprise users at risk. The discoveries reveal over a dozen security flaws that could enable malicious actors to gain control over these routers, thereby compromising networks of affected…

Read MoreWarning: Over 700,000 DrayTek Routers Vulnerable to Hacking Due to 14 New Flaws

Necro Python Malware Enhances Features with New Exploits and Cryptocurrency Mining Abilities

Recent developments have emerged concerning a Python-based “self-replicating, polymorphic bot” known as Necro. These upgrades appear designed to enhance its ability to infiltrate vulnerable systems and evade detection. Initially reported earlier this year, the bot now showcases significant modifications, including various command-and-control (C2) communication techniques and the addition of new…

Read MoreNecro Python Malware Enhances Features with New Exploits and Cryptocurrency Mining Abilities

How Holidays Increase Your Company’s Vulnerability to Cyber Attacks and Steps to Protect Yourself

As the holiday season approaches, families and individuals often shift their focus from work to festivities, gift-giving, and cherished moments with loved ones. However, this shift in priorities can open the door for cybercriminals, who frequently ramp up their attacks during this vulnerable period. Businesses face heightened risks, and it…

Read MoreHow Holidays Increase Your Company’s Vulnerability to Cyber Attacks and Steps to Protect Yourself

Online Job Scams: Emerging Threats to Corporate Network Security

Fraud Management & Cybercrime, Fraud Risk Management, Governance & Risk Management Enterprises Must Address Risks Linked to Compromised Personal Devices Suparna Goswami (gsuparna) • November 7, 2025 Image: Shutterstock Many are familiar with the deceptive texts promising lucrative job opportunities from corporate recruiters. These scams often encourage individuals to follow…

Read MoreOnline Job Scams: Emerging Threats to Corporate Network Security

10 Million People Affected by Data Leak: Impact on Texans Explained – MySA

Major Data Breach Affects 10 Million Individuals; Texans Among Those Impacted A recent cybersecurity incident has resulted in the exposure of sensitive data belonging to approximately 10 million individuals. The breach, which has raised significant concerns within the realm of data security, has left many business owners and professionals questioning…

Read More10 Million People Affected by Data Leak: Impact on Texans Explained – MySA

CISA Alerts Agencies to Patch Actively Exploited Ivanti Endpoint Manager Vulnerability

On Wednesday, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) classified a vulnerability affecting Ivanti Endpoint Manager (EPM) as a Known Exploited Vulnerability (KEV), following findings of active exploitation. This security flaw was addressed by Ivanti in a May update, underscoring its significance within the cybersecurity landscape. The vulnerability, designated…

Read MoreCISA Alerts Agencies to Patch Actively Exploited Ivanti Endpoint Manager Vulnerability

Hackers Gained Access to Colonial Pipeline via Compromised VPN Credentials

A recent investigation has revealed that the ransomware cartel responsible for the Colonial Pipeline attack utilized a compromised virtual private network (VPN) account password to infiltrate the company’s network. This incident occurred in early May and has raised significant security concerns across the United States, particularly regarding critical infrastructure. Reports…

Read MoreHackers Gained Access to Colonial Pipeline via Compromised VPN Credentials

Ransomware Affiliate Detained in Romania; 51 Data Brokers Captured in Ukraine

The European Union Agency for Law Enforcement Cooperation, known as Europol, has reported the apprehension of a Romanian citizen believed to be involved in ransomware activities that targeted high-profile organizations. This marks the third such arrest in Romania concerning ransomware affiliates, highlighting ongoing vulnerabilities in cybersecurity defenses across various sectors.…

Read MoreRansomware Affiliate Detained in Romania; 51 Data Brokers Captured in Ukraine