DigiCert has disclosed a data breach impacting its business customers' contact information, including names and email addresses. The incident involved an internal business system used for archiving customer information, which was moved to a different network segment in February 2025, inadvertently becoming exposed to the internet. Attackers abused a self-registration feature in the system's account manager to create a read-only account that had access to archived data. READ MORE...
Whether through malware or other means, devices associated with the White House network appear to be serving as residential proxy exit nodes, potentially posing security risks to one of the world's most sensitive networks. News of the security snafu comes from security firm Layer3 Intel, which reported this week that it discovered the likely illicit activity thanks to its recently launched Residential Proxy Observatory. READ MORE...
It has emerged this week that Russia's APT29 threat group compromised the website of a Ukrainian SEO and website analytics service, and briefly used the access to distribute malicious device-fingerprinting code to potentially thousands of iPhone and Android users. The weeklong compromise earlier this year was part of a broader watering-hole campaign from APT29 that also used other legitimate and fake websites to distribute the fingerprinting malware. READ MORE...
The recent refrigerator hacks wreaking havoc across European supermarkets is a lesson in how shared weaknesses in operational technology (OT) can spread across a whole supply chain. On the night of Oct. 11, an unknown attacker reportedly compromised refrigeration controls used by hundreds of French supermarkets, triggering extended defrost cycles in refrigerators and freezers across the country. The incident caused millions of euros in damage across roughly 700 impacted stores in France alone. READ MORE...
Dutch-Belgian grocery giant Ahold Delhaize estimates that last month's cyberattack, which disrupted operations in the US and the Benelux, will wipe €200 million to €250 million ($224 million to $280 million) off its fourth-quarter net sales. The company, whose brands include Albert Heijn, Delhaize, Food Lion and Hannaford, published the estimate this week with its third-quarter results. The attack occurred after the quarter had closed. READ MORE...
India's Computer Emergency Response Team has warned the nation's financial services industry of a "significant escalation" in attacks by what it describes as an "AI-assisted financial threat actor" that has re-targeted victims after they flubbed remediation efforts. CERT-IN first detected the attacks in October and issued advisory in which it warned digital lending platforms and fintech entities that attackers were targeting internet-facing applications, exposed APIs and privileged endpoints. READ MORE...
D-Link shared mitigation measures for multiple unpatched security flaws affecting DGS-3130 series managed Gigabit stackable switches. These switch models provide multi-gigabit uplinks, allowing enterprise network administrators to eliminate data bottlenecks, and are designed primarily for small-to-medium businesses (SMBs) and metro Ethernet deployments. READ MORE...
A newly disclosed flaw involving OpenSSH and musl, dubbed "*sshole," allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts configured to block password authentication simply by entering an oversized password. The flaw only affects OpenSSH servers running on Linux distributions that use the musl C library, including Alpine Linux, OpenWrt, Buildroot, and Yocto, under certain authentication configurations. READ MORE...