The Breach News

Critical Vulnerabilities in SimpleHelp Enable File Theft, Privilege Escalation, and Remote Code Execution Attacks

Critical Flaws Discovered in SimpleHelp Remote Access Software: Urgent Action Required Recent cybersecurity research has unveiled several significant vulnerabilities in the SimpleHelp remote access software, raising concerns for businesses relying on this platform. These flaws, identified by Horizon3.ai researcher Naveen Sunkavally, posed risks including potential information disclosure, privilege escalation, and…

Read MoreCritical Vulnerabilities in SimpleHelp Enable File Theft, Privilege Escalation, and Remote Code Execution Attacks

Iran’s MuddyWater Hacking Group Deploys New Malware in Global Cyber Attacks

New Malware Exposed as Iranian APT Group Targets Global Networks Cybersecurity agencies from the United States and the United Kingdom have revealed new malware attributed to the Iranian government-sponsored advanced persistent threat (APT) group known as MuddyWater. This malware is reported to facilitate attacks against both government and commercial networks…

Read MoreIran’s MuddyWater Hacking Group Deploys New Malware in Global Cyber Attacks

EU Reveals Plans for AI Technology Sovereignty

Artificial Intelligence & Machine Learning, Next-Generation Technologies & Secure Development AI Strategies Aim to Strengthen Global AI Position Akshaya Asokan (asokan_akshaya) • October 8, 2025 Henna Virkkunen, European Commissioner for Technological Sovereignty, Security, and Democracy, during an Aug. 10, 2025 European Parliament session. (Image: Philippe Stirnweiss/European Union) The European Union…

Read MoreEU Reveals Plans for AI Technology Sovereignty

A Ransomware Apocalypse Is Looming for Everyone

Generative AI is poised to empower individuals to perpetrate advanced phishing attacks, which will only be thwarted by next-generation multi-factor authentication devices. In 2023, ransomware incidents soared to unprecedented levels, resulting in record-breaking damages. Weekly headlines highlighted high-profile organizations such as MGM, Johnson Controls, Clorox, Hanes Brands, and Caesars Palace,…

Read MoreA Ransomware Apocalypse Is Looming for Everyone

As Digital Payments Surge, Here’s How Small Retailers Can Tackle Cybersecurity Threats

Cybersecurity Vulnerabilities: SMEs as Prime Targets Many small and medium-sized enterprises (SMEs) operate under the erroneous belief that their size shields them from the attentions of cybercriminals. This misconception could not be further from the truth. In fact, SMEs are increasingly becoming prime targets for a range of cyber threats,…

Read MoreAs Digital Payments Surge, Here’s How Small Retailers Can Tackle Cybersecurity Threats

Google Cloud Researchers Identify Vulnerabilities in Rsync File Synchronization Tool

Recent disclosures have unveiled up to six security vulnerabilities within the widely-used Rsync file synchronization tool, critical for Unix-based systems. These vulnerabilities present significant risks, including the potential for attackers to execute arbitrary code on client machines. The CERT Coordination Center (CERT/CC) alerted users that exploiting these flaws could allow…

Read MoreGoogle Cloud Researchers Identify Vulnerabilities in Rsync File Synchronization Tool

Introducing ‘SockDetour’: A Fileless, Socketless Backdoor Targeting U.S. Defense Contractors

Title: New Malware ‘SockDetour’ Exposed as a Menace to U.S. Defense Contractors Recent research unveiled a sophisticated and previously unreported malware known as SockDetour, which has been targeting defense contractors in the United States. This stealthy backdoor is engineered to act as a secondary implant on compromised Windows systems, raising…

Read MoreIntroducing ‘SockDetour’: A Fileless, Socketless Backdoor Targeting U.S. Defense Contractors

Arrests Highlight Concerns Over Teen Recruitment for Cyberespionage

Cyberwarfare / Nation-State Attacks, Fraud Management & Cybercrime Telegram Utilized in Recruitment of Teenage Cyber Reconnaissance Chris Riotta (@chrisriotta) • October 8, 2025 Europol headquarters in The Hague, Netherlands, captured in a photo dated December 7, 2019. (Image: Aperture Exposure Images/Shutterstock) In late September, law enforcement in the Netherlands arrested…

Read MoreArrests Highlight Concerns Over Teen Recruitment for Cyberespionage

Salesforce Declines to Meet $1 Billion Extortion Demand Following Data Breach of 1 Billion Records

Salesforce is facing a serious cybersecurity threat as a criminal syndicate, identifying itself as Scattered LAPSUS$ Hunters, has made allegations of stealing around one billion records from multiple Salesforce customers. The group initiated this extortion campaign back in May, utilizing voice calls to reach organizations that utilize Salesforce for data…

Read MoreSalesforce Declines to Meet $1 Billion Extortion Demand Following Data Breach of 1 Billion Records