Cybersecurity News - Page 44

Attackers have used a combination of spear-phishing emails, hijacked business conversations, and compromised accounts to post fake freight listings on load boards.

Ruter confirmed that the Chinese company has access to the bus’s software updates, diagnostics, and battery systems.

The malicious campaign used a ZIP attachment, which masqueraded as a VPN invoice.

BadCandy grants attackers root-level command execution on compromised systems.

In brief: Microsoft patches a WSUS flaw, a major US telecom supplier compromised by nation-state hackers, and more.

Peter Williams used his high-level access to the company’s secure network to download and transfer the classified components.

The attackers remained undetected for nearly nine months.

The October 2025 update delivers improvements across multiple sections, including techniques, groups, campaigns, and software.

Aisuru is related to “TurboMirai” malware, general class of Mirai-variant DDoS botnets capable of generating multi-tb/sec and -gpps direct-path DDoS attacks.

TEE.Fail leverages a memory-bus interposition attack on DDR5-based systems, exploiting design weaknesses in newer confidential computing architectures.