Western Digital Suffers Data Breach, Exposing Customer Information Western Digital, a major player in digital storage, has confirmed that its systems were breached by an unauthorized third party. During this incident, personal data belonging to customers of the company’s online store was compromised, raising significant concerns about data security and…
Cyberwarfare / Nation-State Attacks, Fraud Management & Cybercrime Russian Intelligence Hackers Adapt Strategies to Avoid Detection Chris Riotta (@chrisriotta) • October 21, 2025 A Russian Federal Security Service officer in assault gear. (Image: SGr/Shutterstock) A state-sponsored cyberespionage group from Russia, known for its targeting of policymakers, has swiftly enhanced its…
Oct 22, 2025The Hacker NewsData Breach / Enterprise Security Decades of cybersecurity advice advocating for complex passwords—including uppercase letters, numbers, and symbols—have recently evolved. Current recommendations emphasize the importance of password length over intricate patterns. This shift focuses on the security boost provided by longer passwords and encourages the use…
In recent years, serverless computing has gained traction as businesses seek scalable and efficient solutions like AWS Lambda. While these environments provide significant advantages, they also introduce complex security challenges. Current security measures primarily focus on log monitoring and static code analysis; however, these methods have substantial limitations. For one,…
On Wednesday, cybersecurity agencies from Australia, the U.K., and the U.S. issued a joint advisory detailing the active exploitation of vulnerabilities in Fortinet and Microsoft Exchange ProxyShell by Iranian state-sponsored threat actors. This exploitation is part of a broader effort to gain initial access into susceptible systems, subsequently enabling activities…
Attack Surface Management, Security Operations Administering Response to NTLM Vulnerability Exploitation Greg Sirico • October 21, 2025 Image: Afansev Ivan/Shutterstock The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert regarding an actively exploited vulnerability in the Server Message Block (SMB) protocol. This flaw, identified as CVE-2025-33073, has…
Revamped Cybersecurity Alert: AI-Enhanced Scams Utilize Stolen Data TOLEDO, Ohio (WTVG) – In an alarming trend, cybercriminals are leveraging artificial intelligence to breathe new life into previously stolen data, effectively repackaging past breaches for their malicious purposes. This development signals a concerning evolution in the tactics of cyber attackers, raising…
Recent disclosures have unveiled nearly two dozen vulnerabilities in Advantech’s industrial-grade wireless access points, a suite of devices that are integral to operational technology networks. Among these vulnerabilities, several are critical, enabling potential attackers to bypass authentication protocols and execute code at elevated privileges, thereby posing substantial risks to the…
On Thursday, the U.S. government unsealed an indictment charging two Iranian nationals with participating in a cyber-enabled disinformation and threat campaign aimed at undermining the integrity of the 2020 presidential elections. The indictment alleges that they gained unauthorized access to confidential voter information from at least one state election website,…
