Data Breach Exposes Files Related to India’s Kudankulam Nuclear Power Plant
A ransomware group has leaked thousands of files allegedly linked to India’s Kudankulam Nuclear Power Plant, prompting investigations by CERT In and other authorities.
National CERT Issues Cybersecurity Advisory After Global Fortinet Attack Impacts 74000 Devices
National CERT has issued a cybersecurity advisory urging organizations in Pakistan to strengthen defenses after a global cyberattack affected approximately 74,000 Fortinet devices.
SonicWall Confirms Active Exploitation of Two SMA 1000 Zero Day Vulnerabilities
SonicWall has confirmed active exploitation of two zero day vulnerabilities affecting SMA 1000 appliances, including a critical flaw that could allow attackers to execute administrator level commands.
Cursor Vulnerability Allows Malicious Git Repositories to Execute Code on Windows Without User Approval
A newly disclosed Cursor vulnerability allows malicious Git repositories on Windows to execute arbitrary code by placing a fake git.exe file in the project root, with no security patch currently available.
Pakistani Cybersecurity Researcher Receives NASA Letter of Recognition for Reporting Security Vulnerability
A 21 year old self taught cybersecurity researcher from Gujar Khan has received a NASA Letter of Recognition and Hall of Fame listing after responsibly reporting a security vulnerability.
RedHook Android Malware Uses Wireless ADB to Steal Banking Information Without Root Access
Researchers warn that the latest RedHook Android malware abuses Wireless ADB and Accessibility permissions to gain deep device access and steal banking credentials without requiring root access.
CrashStealer macOS Malware Uses Apple Notarized Dropper to Bypass Gatekeeper and Steal Sensitive Data
Researchers have identified CrashStealer, a new macOS information stealing malware that uses an Apple notarized dropper to bypass Gatekeeper while targeting browser data, cryptocurrency wallets, password managers, and keychain credentials.
National CERT Pakistan Warns Organizations to Patch Critical FortiSandbox Vulnerabilities Under Active Exploitation
National CERT Pakistan has issued an advisory warning organizations to immediately patch critical FortiSandbox vulnerabilities that are being actively targeted through internet facing systems.
Study Finds Privacy Risks in 85 Crypto Wallet Browser Extensions With Address Tracking Concerns
Researchers at KU Leuven found that 85 popular crypto wallet browser extensions expose privacy risks by leaking wallet addresses, enabling cross site tracking, and linking anonymous crypto identities to real users.
CyberSilo To Showcase CTEM Platform In Live Webinar Focused On Vulnerability And Risk Management
CyberSilo will host a live online demonstration of its Continuous Threat Exposure Management platform on July 22, highlighting vulnerability management, compliance monitoring, and risk prioritization capabilities.
