← Feed

Posts

• View post

  📰 Advisory Warns of Prolific SafePay Ransomware Targeting Critical Infrastructure CISA, FBI & partners issue a joint advisory on the prolific SafePay ransomware group. Active since 2024, the gang has hit ~600 victims in critical infrastructure globally. Patch, use MFA, and backup data now. #StopRansomware #SafePay #CyberSecurity 🔗 https://cyber.netsecops.io/articles/joint-advisory-warns-of-highly-active-safepay-ransomware/?utm_source=mastodon&utm_medium=social&utm_campa...

• View post

  📰 Weak eMudhra Certificate Keys Force Emergency Browser Blocks 🚨 Major security incident: Browsers block eMudhra intermediate certificates after discovery of critically weak private keys. Some keys had single-digit values, allowing for easy certificate forgery. Update your browsers now! #PKI #TLS #CyberSecurity 🔗 https://cyber.netsecops.io/articles/weak-emudhra-certificate-keys-force-emergency-revocation/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

• View post

  📰 Arizona's IMS Care Center Discloses Breach of Patient Data IMS Care Center in Arizona has disclosed a data breach after a compromise of its email system. Patient names, Social Security numbers, and medical information were exposed. Affected individuals are being notified. #DataBreach #Healthcare #PII #PHI 🔗 https://cyber.netsecops.io/articles/arizona-ims-care-center-discloses-patient-data-breach/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

• View post

  📰 Critical RCE Vulnerabilities in PHP Affect Millions of Web Servers Two critical RCE vulnerabilities (CVE-2026-109618, CVE-2026-109619) in PHP with a 9.2 CVSS score. PoC exists. Over 22M instances exposed. Patching is urgent. #PHP #Vulnerability #CyberSecurity #RCE 🔗 https://cyber.netsecops.io/articles/critical-php-vulnerabilities-cve-2026-109618-cve-2026-109619/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

• View post

  📰 LiteLLM Supply Chain Attack Steals Cloud and AI Service Keys ⚠️ LiteLLM suffers its second supply chain attack this year. Malicious version v1.107.0 on PyPI & Docker Hub steals cloud logins, dev secrets & AI API keys. All users must rotate credentials immediately. #SupplyChain #PyPI #Docker #InfoSec 🔗 https://cyber.netsecops.io/articles/litellm-hit-by-supply-chain-attack-stealing-cloud-credentials/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

• View post

  📰 $2.56M Stolen from Ngrave Wallet Users via Phishing Attack 💸 Ngrave wallet users lost $2.56M in a sophisticated phishing attack. Hackers compromised a 3rd-party service to send fake push notifications, luring users to a site to steal their 24-word recovery phrases. #Phishing #Crypto #Ngrave #Wallet 🔗 https://cyber.netsecops.io/articles/ngrave-wallet-users-lose-2-5-million-in-phishing-attack/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

• View post

  📰 Kroll Report: 69% of Orgs Breached in Past Year, Most via Third Parties 📈 Kroll's 2026 Data Breach Outlook: 69% of organizations suffered a breach in the past year, with third-party tech vendors being the source of the most widespread incidents. #DataBreach #Kroll #CyberSecurity #Report #SupplyChain 🔗 https://cyber.netsecops.io/articles/kroll-report-finds-69-percent-of-orgs-breached-in-past-year/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

• View post

  📰 Computer Task Group Breach Exposes SSNs and Health Information 📄 IT firm Computer Task Group (CTG) discloses a data breach exposing names, Social Security numbers, financial data, and health info. A class-action law firm is now investigating the incident. #DataBreach #PII #PHI #CTG 🔗 https://cyber.netsecops.io/articles/computer-task-group-data-breach-exposes-ssns-and-health-data/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

• View post

  📰 GitLab Patches Critical Integer Overflow Vulnerability 📢 GitLab has released emergency patches for CE/EE, fixing a critical integer overflow vulnerability and a high-severity auth issue. All administrators of self-managed instances are urged to upgrade immediately. #GitLab #PatchManagement #DevSecOps #V... 🔗 https://cyber.netsecops.io/articles/gitlab-releases-emergency-patches-for-critical-integer-overflow-vuln/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

• View post

  📰 Actor 'BUGSTER' Uses AI for Credential Theft and VoIP Fraud Unit 42 uncovers threat actor 'BUGSTER' weaponizing AI tools like DeepSeek & Hermes Agent. Attacks include data exfiltration from universities in India, VoIP fraud planning, and automated password cracking. #ThreatActor #AI #Cybercrime #DeepSeek 🔗 https://cyber.netsecops.io/articles/threat-actor-bugster-uses-ai-for-cybercrime-planning-and-execution/?utm_source=mastodon&utm_medium=socia...

• View post

  📰 Critical PHP2Shell RCE Flaws Leaked Ahead of Coordinated Patch 🚨 CRITICAL: Two RCE flaws in PHP dubbed "PHP2Shell" (CVE-2026-109618, CVE-2026-109619) were leaked before patches. Affects PHP 5.4+. Active exploitation is confirmed. Prepare for emergency patching now! #PHP #RCE #CyberSecurity 🔗 https://cyber.netsecops.io/articles/critical-php2shell-vulnerabilities-leaked-ahead-of-patch/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

• View post

  📰 Advisory Warns of Prolific SafePay Ransomware Targeting Critical Infrastructure CISA, FBI & partners issue a joint advisory on the prolific SafePay ransomware group. Active since 2024, the gang has hit ~600 victims in critical infrastructure globally. Patch, use MFA, and backup data now. #StopRansomware #SafePay #CyberSecurity 🔗 https://cyber.netsecops.io/articles/joint-advisory-warns-of-highly-active-safepay-ransomware/?utm_source=mastodon&utm_medium=social&utm_campa...

• View post

  📰 Capcom Data Breach Exposes Data of Over 11 Million Users Gaming giant Capcom confirms a data breach affecting over 11.7 million CAPCOM ID accounts. Exposed data includes emails, IP addresses, and login info. Users are warned to watch for targeted phishing attacks. #Capcom #DataBreach #Gaming #CyberSecurity 🔗 https://cyber.netsecops.io/articles/capcom-data-breach-exposes-data-of-11-million-users/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

• View post

  📰 Arista Patches Exploited VeloCloud Orchestrator Zero-Day 🚨 CRITICAL ZERO-DAY: Arista patches actively exploited SQL injection vulnerability (CVE-2026-114625) in on-prem VeloCloud Orchestrator. Flaw allows superuser control. Patch immediately! #ZeroDay #CVE #Arista #CyberSecurity #SDWAN 🔗 https://cyber.netsecops.io/articles/arista-patches-actively-exploited-velocloud-orchestrator-zero-day-cve-2026-114625/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

• View post

  📰 Ransomware Attack Forces NY School District to Cancel Classes A ransomware attack has forced the Oneonta City School District in New York to cancel classes, affecting 1,700 students. The incident highlights the continued targeting of the education sector by cybercriminals. #Ransomware #CyberAttack #Education 🔗 https://cyber.netsecops.io/articles/oneonta-new-york-school-district-cancels-classes-after-ransomware-attack/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

• View post

  📰 INTERPOL Disrupts 10,909 Malicious Networks, Arrests 1,462 INTERPOL's Operation Serengeti III leads to 1,462 arrests & the disruption of 10,909 malicious networks across 21 countries. Over $105M in illicit funds recovered. A major blow to global cybercrime. #INTERPOL #Cybercrime #LawEnforcement 🔗 https://cyber.netsecops.io/articles/interpol-operation-serengeti-iii-disrupts-10000-cybercrime-networks/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

• View post

  📰 New 'GlassWorm' Malware Spreads Via VS Code Extensions New 'GlassWorm' malware is spreading via malicious VS Code extensions. It acts as a worm & data stealer, targeting developer tokens, browser logins, & crypto wallets. Poses a major supply chain risk. #Malware #GlassWorm #VSCode #CyberSecurity 🔗 https://cyber.netsecops.io/articles/glassworm-malware-spreads-through-malicious-vs-code-extensions/?utm_source=mastodon&utm_medium=social&am...

• View post

  📰 Critical Splunk Enterprise Flaw Allows System Compromise 🚨 CRITICAL FLAW: A 9.9 CVSS vulnerability (CVE-2026-76299) in Splunk Enterprise allows low-privilege attackers to gain full system control. No active exploitation yet, but patching is urgent. #Splunk #CVE #CyberSecurity #Vulnerability #PatchNow 🔗 https://cyber.netsecops.io/articles/splunk-enterprise-vulnerability-cve-2026-76299-allows-system-compromise/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

• View post

  📰 Advisory Warns of Prolific SafePay Ransomware Targeting Critical Infrastructure CISA, FBI & partners issue a joint advisory on the prolific SafePay ransomware group. Active since 2024, the gang has hit ~600 victims in critical infrastructure globally. Patch, use MFA, and backup data now. #StopRansomware #SafePay #CyberSecurity 🔗 https://cyber.netsecops.io/articles/joint-advisory-warns-of-highly-active-safepay-ransomware/?utm_source=mastodon&utm_medium=social&utm_campa...

• View post

  📰 Kroll Report: 69% of Orgs Breached in Past Year, Most via Third Parties 📈 Kroll's 2026 Data Breach Outlook: 69% of organizations suffered a breach in the past year, with third-party tech vendors being the source of the most widespread incidents. #DataBreach #Kroll #CyberSecurity #Report #SupplyChain 🔗 https://cyber.netsecops.io/articles/kroll-report-finds-69-percent-of-orgs-breached-in-past-year/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

• View post

  📰 CISA & FBI Warn of Third-Party Risks to Industrial Control Systems CISA & FBI issue joint guidance on securing critical infrastructure from third-party ICS integrator risks. The advisory stresses least privilege, robust contracts, and secure remote access monitoring. #ICS #OTsecurity #CISA #SupplyChain 🔗 https://cyber.netsecops.io/articles/cisa-fbi-warn-critical-infrastructure-on-third-party-ics-risks/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

• View post

  📰 Ransomware Roundup: LockBit, Akira, and Others Claim Victims Across Multiple Sectors Ransomware activity surges on July 1st. Groups like LockBit, Akira, and TheGentlemen claim multiple victims in tech, government, and manufacturing across the globe. 🌎 #Ransomware #DataBreach #LockBit #Akira 🌐 cyber[.]netsecops[.]io 🔗 https://cyber.netsecops.io/articles/breachsense-documents-multiple-ransomware-attacks-july-1st/?utm_source=mastodon&utm_medium=social&utm_campaign=daily