Pro-Iranian Hacktivist Group Leaks Personal Records from the 2024 Saudi Games https://firewall.firm.in/wp-content/uploads/2025/06/data-leak.jpg Thousands of personal records allegedly linked to athletes and visitors of the Saudi Games have been published online by a pro-Iranian hacktivist group called Cyber Fattah. Cybersecurity company Resecurity said the breach was announced on Telegram on June 22, 2025, in the form of SQL database dumps, characterizing ...
Read More »Vulnerabilities & Exploits
Gemini forged like achilles: Google shields Gemini, with powerful security Advancements – ET CISO
Gemini forged like achilles: Google shields Gemini, with powerful security Advancements – ET CISO https://etimg.etb2bimg.com/thumb/msid-121965910,imgsize-27876,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/gemini-forged-like-achilles-google-shields-gemini-with-powerful-security-advancements.jpg As AI expands itself into more industries, the need for AI to be forged like a modern-day Achilles becomes increasingly necessary. For, the more its branches extend into various sectors, the more vulnerable it shall become to the ever-evolving minefield of digital threats. Google DeepMind ...
Read More »Scattered Spider Behind Cyberattacks on M&S and Co-op, Causing Up to $592M in Damages
Scattered Spider Behind Cyberattacks on M&S and Co-op, Causing Up to $592M in Damages https://firewall.firm.in/wp-content/uploads/2025/06/hacking-back-hackers.png Jun 21, 2025Ravie LakshmananCyber Attack / Critical Infrastructure The April 2025 cyber attacks targeting U.K. retailers Marks & Spencer and Co-op have been classified as a “single combined cyber event.” That’s according to an assessment from the Cyber Monitoring Centre (CMC), a U.K.-based independent, non-profit ...
Read More »Zoomcar says hacker accessed personal data of 8.4 million users – ET CISO
Zoomcar says hacker accessed personal data of 8.4 million users – ET CISO https://etimg.etb2bimg.com/thumb/msid-121899085,imgsize-22952,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/zoomcar-says-hacker-accessed-personal-data-of-8-4-million-users.jpg Zoomcar, a leading Indian car-sharing marketplace, has disclosed that hackers gained unauthorized access to the personal data of at least 8.4 million customers. The breach, detected on June 9, compromised names, phone numbers, and car registration numbers, according to a filing with the U.S. Securities and ...
Read More »New Flodrix Botnet Variant Exploits Langflow AI Server RCE Bug to Launch DDoS Attacks
New Flodrix Botnet Variant Exploits Langflow AI Server RCE Bug to Launch DDoS Attacks https://firewall.firm.in/wp-content/uploads/2025/06/Langflow-AI.jpg Jun 17, 2025Ravie LakshmananBotnet / Vulnerability Cybersecurity researchers have called attention to a new campaign that’s actively exploiting a recently disclosed critical security flaw in Langflow to deliver the Flodrix botnet malware. “Attackers use the vulnerability to execute downloader scripts on compromised Langflow servers, which ...
Read More »With retail cyberattacks on the rise, customers find orders blocked and shelves empty – ET CISO
With retail cyberattacks on the rise, customers find orders blocked and shelves empty – ET CISO https://etimg.etb2bimg.com/thumb/msid-121842178,imgsize-215832,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/with-retail-cyberattacks-on-the-rise-customers-find-orders-blocked-and-shelves-empty.jpg Representative image A string of recent cyberattacks and data breaches involving the systems of major retailers have started affecting shoppers. United Natural Foods, a wholesale distributor that supplies Whole Foods and other grocers, said this week that a breach of its systems was ...
Read More »Discord Invite Link Hijacking Delivers AsyncRAT and Skuld Stealer Targeting Crypto Wallets
Discord Invite Link Hijacking Delivers AsyncRAT and Skuld Stealer Targeting Crypto Wallets https://firewall.firm.in/wp-content/uploads/2025/06/Discord.jpg A new malware campaign is exploiting a weakness in Discord’s invitation system to deliver an information stealer called Skuld and the AsyncRAT remote access trojan. “Attackers hijacked the links through vanity link registration, allowing them to silently redirect users from trusted sources to malicious servers,” Check Point ...
Read More »New Supply Chain Malware Operation Hits npm and PyPI Ecosystems, Targeting Millions Globally
New Supply Chain Malware Operation Hits npm and PyPI Ecosystems, Targeting Millions Globally https://firewall.firm.in/wp-content/uploads/2025/06/code.jpg Cybersecurity researchers have flagged a supply chain attack targeting over a dozen packages associated with GlueStack to deliver malware. The malware, introduced via a change to “lib/commonjs/index.js,” allows an attacker to run shell commands, take screenshots, and upload files to infected machines, Aikido Security told The ...
Read More »New Atomic macOS Stealer Campaign Exploits ClickFix to Target Apple Users
New Atomic macOS Stealer Campaign Exploits ClickFix to Target Apple Users https://firewall.firm.in/wp-content/uploads/2025/06/apple.jpg Cybersecurity researchers are alerting to a new malware campaign that employs the ClickFix social engineering tactic to trick users into downloading an information stealer malware known as Atomic macOS Stealer (AMOS) on Apple macOS systems. The campaign, according to CloudSEK, has been found to leverage typosquat domains mimicking ...
Read More »Urgent cyber warning for Americans: 184 million passwords leaked – ET CISO
Urgent cyber warning for Americans: 184 million passwords leaked – ET CISO https://etimg.etb2bimg.com/thumb/msid-121561029,imgsize-82362,width-1200,height=765,overlay-etciso/data-breaches/urgent-cyber-warning-for-americans-184-million-passwords-leaked.jpg In one of the most alarming cybersecurity revelations of the decade, a massive data leak has exposed over 184 million records, including emails, passwords, and login links — all stored in plain text — according to a new report by Wired. The shocking discovery was made by ...
Read More »