perfektblue bluetooth vulnerability exposes millions of vehicles to remote code execution
Cybersecurity researchers have discovered a set of four security flaws in Opensynergy’s BluesDk Bluetooth stack. A vulnerability called PEFEKTBLUE is created together as an exploit chain for running any code in cars from at least three major automakers, Mercedes-Benz, Volkswagen and Scoder, according to PCA Cybersecurity (formerly PCAutomotive). Other than these three, the fourth unnamed […]
Protecting data in the AI era
July 11, 2025Hacker NewsData Security/Enterprise Security 2025 Data Risk Report: Companies face potentially serious data loss risk from AI fuel tools. It helps to adopt a unified, AI-driven approach to data security. As businesses increasingly rely on cloud-driven platforms and AI-powered tools to accelerate digital transformation, the interests to protect sensitive enterprise data have reached […]
Critical Wing FTP Server Vulnerability (CVE-2025-47812)
July 11, 2025Ravi LakshmananCyber Attacks/Vulnerability According to Huntress, the most recent disclosed security flaw affecting Wing FTP servers is subject to aggressive exploitation in the wild. The vulnerability tracked as CVE-2025-47812 (CVSS score: 10.0) is a case of improper handling of null (‘\0’) bytes in the server’s web interface, allowing remote code execution. Addressed in […]
Iran-backed Pay2key ransomware resurfaces
Iran-backed ransomware (RAAS) named Pay2key resurfaces in the wake of Israel-Iran-US conflict last month, offering bigger payments to Cybercriminals launching attacks against Israel and the US The financially motivated scheme currently operating under Moniker Pay2key.i2p is rated as linked to a hacking group tracked as Fox Kitten (aka Lemon Sandstorm). “It links to the infamous […]
CISA adds Citrix Netscaler CVE-2025-5777 to KEV catalog as an active exploit target enterprise
The US Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw affecting the Citrix Netscaler ADC, and its gateway to its known exploited vulnerability (KEV) catalog officially confirmed that the vulnerability has been weaponized in the wild. The drawback of the problem is CVE-2025-5777 (CVSS score: 9.3). This is when there […]
A critical MCP-Remote vulnerability allows remote code execution, affecting over 437,000 downloads
July 10, 2025Ravi LakshmananVulnerability / AI Security Cybersecurity researchers have discovered a critical vulnerability in open source MCP remote projects that could result in the execution of any operating system (OS) commands. The vulnerability tracked as CVE-2025-6514 has a CVSS score of 9.6 out of 10.0. “The vulnerability poses a significant risk to the user […]
Fake Games and AI Companies Push Malware to Cryptocurrency Users via Telegram and Discord
July 10, 2025Ravi LakshmananCryptocurrency/Cybercrime Cryptocurrency users are the target of ongoing social engineering campaigns that employ fake startups to download malware that can consume digital assets from both Windows and MacOS systems. “These malicious operations have been made using AI, gaming and web3 companies with Spoofed Social Media accounts and project documents hosted on legitimate […]
Four have been arrested in a £440 million cyberattack on Marks & Spencer, Co-ops and Harrods
The UK National Crime Agency (NCA) announced on Thursday that four people have been arrested in connection with a cyberattack targeting major retailers Marks & Spencer, the cooperative and Harrods. Individuals arrested include two 19-year-old men, three 17-year-olds and a 20-year-old woman. They were arrested in the West Midlands and London on suspicion of violation […]
What security leaders need to know about AI governance in SaaS
Generated AI has not arrived with a bang. It slowly creeps up into the software companies use every day. Whether it’s video conferencing or CRM, vendors are in a hurry to integrate AI Copilots and Assistant into their SAAS applications. Slack can now provide AI summary for chat threads, Zoom can provide a meeting overview, […]
New Zur Malware Variant Variant Targeting Developers via Trojanized Termius MacOS App
July 10, 2025Ravi LakshmananEndpoint security/vulnerability Cybersecurity researchers have discovered a new artifact related to Apple MacOS malware called Zuru. Sentinelone said in a new report shared with Hacker News that it has been observed that malware has been embellished in the cross-platform SSH client and server management tool Termius in late May 2025. “Zuru Malware […]