A large-scale operation planting malicious code in open-source projects on GitHub has been uncovered by cybersecurity researchers. The scheme, centered on a developer using the alias ischhfd83, involves over 130 backdoored repositories disguised as malware tools or game cheats. A Booby-Trapped Malware Toolkit The investigation began when a Sophos customer queried the safety of a […]

Qualcomm has announced that it has released patches for a series of vulnerabilities affecting dozens of its chips, including three zero-day flaws that the chipmaker says may be under active exploitation by hackers. Qualcomm cited Google’s Threat Analysis Group (TAG), which focuses on government-backed cyberattacks, indicating that these three flaws “may be under limited, targeted […]

ExploreKettering Health cyberattack latest: Internal health records back, MyChart work continues “There’s no impact on services and communications to residents,’’ said Caroline McKinney, township administrator. The public can still communicate with township officials via the phone, email, social media platforms and website. Portals for submission of planning and other documents are operational but developers “got […]

A group of financially motivated cyberscammers who specialize in Scattered-Spider-like fake IT support phone calls managed to trick employees at about 20 organizations into installing a modified version of Salesforce’s Data Loader that allows the crims to steal sensitive data. Google Threat Intelligence Group (GTIG) tracks this crew as UNC6040, and in research published today […]

Aembit, the workload identity and access management (IAM) company, today announced its inclusion in Rising in Cyber 2025, an independent list launched by Notable Capital to spotlight the 30 most promising cybersecurity startups shaping the future of security. Unlike traditional rankings, Rising in Cyber 2025 honorees were selected through a multi-stage process grounded in real-world validation. […]

Publishing giant Lee Enterprises is notifying over 39,000 people whose personal information was stolen in a February 2025 ransomware attack. As one of the largest newspaper groups in the United States, Lee Enterprises publishes 77 daily newspapers and 350 weekly and specialty publications across 26 states. The local news provider’s newspapers have a daily circulation […]

Separate cyberattacks impact Ohio, Oklahoma, Puerto Rico  SC Media Source link …………………….

Regional newspaper publisher Lee Enterprises says data belonging to around 40,000 people was stolen during an attack on its network earlier this year. The Iowa-based company confirmed first and last names, as well as social security numbers, were among the data types potentially accessed, although it does not think any of it has been misused. […]

When a ransomware gang names one target but links to another target or posts a description of a different target, journalists and researchers may understandably be left wondering who was attacked. If the threat actors have posted proof of claims, it may be possible to figure out who the target was, but with no proof […]

EXCLUSIVE: A scammer has been reported to both the FBI and UK cybercrime agency after posing as well-known TV executives and asking writers to send them up to £2,500 ($3,300) to help get their scripts developed. Deadline has seen evidence of at least half a dozen British writers who have been contacted by a person […]