News

CVE-2025-54309 could allow remote attackers to obtain admin access via HTTPS

On-prem SharePoint customers have been told to assume compromise, with attackers observed to be exfiltrating data from victim servers across critical sectors

The US CISA has issued advisories for Industrial Control Systems vulnerabilities affecting multiple vendors including Johnson Controls, ABB, Hitachi Energy, and Schneider Electric

Russian military intelligence-linked hackers are using a new malware called “Authentic Antics” to secretly access Microsoft cloud email accounts, the UK’s NCSC reports

Ukraine’s CERT-UA has identified a new AI-powered malware, dubbed “LameHug,” which executes commands on compromised Windows systems in cyber-attacks, targeting the nation’s security and defense sector

A cryptomining botnet active since 2019 has incorporated likely AI-generated Lcryx ransomware into its operations

Comparitech found that healthcare ransomware attacks rose 4% in H1 2025, a significantly lower rate than the cross-sector average of 50%

A new malware campaign uses GitHub to deliver payloads via Amadey botnet, bypassing email distribution

Cybercriminals are using AI cloaking tools to evade detection, disguising phishing and malware sites

Sophos X-Ops sees exploitation across multiple customer estates