Allianz Life hit by Salesforce breach—1.1M customers exposed in a social enginee...

Workday’s third‑party CRM breach exposed contact data, heightening social engine...

Cisco warns of a CVSS 10.0 flaw in Firewall Management Center—unauth RCE via RAD...

Salesforce

ShinyHunters

1.1M Affected in Allianz Life Data Breach via Social Engineering

Allianz Life hit by Salesforce breach—1.1M customers exposed in a social engineering attack by ShinyHunters.

19-Aug-2025

4 min read

Social Engineering

Workday breach puts 70M users at risk via third‑party CRM leak

Workday’s third‑party CRM breach exposed contact data, heightening social engineering risks—echoing dealership portal flaws at a major automaker....

18-Aug-2025

6 min read

Radius

RCE

Cisco Firewall Brain Hit by CVSS 10.0 RCE Flaw, Admins Must Act Fast!

Cisco warns of a CVSS 10.0 flaw in Firewall Management Center—unauth RCE via RADIUS. Patch or disable now to stop attackers seizing control. ...

16-Aug-2025

5 min read

Fortinet

Fortinet VPNs Hit by Coordinated Brute‑Force Waves, Zero‑Day Fears

Coordinated brute-force campaigns against Fortinet SSL VPN and FGFM services in early August signal a potential zero-day window, with telemetry linking activity patterns...

14-Aug-2025

6 min read

Debian

Backdoor

35 Docker Hub Images Still Carry the Deadly XZ Backdoor After 1 Year

Over a year later, 35 Docker Hub images still hide the critical XZ backdoor, risking silent SSH takeovers for unsuspecting developers.

13-Aug-2025

4 min read

NetScaler

Active exploitation of NetScaler CVE-2025-6543 confirmed by NCSC

Netherlands’ NCSC: active CVE-2025-6543 exploits on NetScaler—zero-day since May; web shells, trace wiping observed. Patch and kill active sessions. ...

12-Aug-2025

3 min read

Bouygues

6.4 Million Customers Exposed in France’s Largest Telecom Hack This Decade

Bouygues Telecom confirms a massive cyberattack affecting 6.4 million customers, exposing personal details and IBANs. Here’s what happened, why it matters, and how to protect yourself....

09-Aug-2025

3 min read

Golang

Eleven Malicious Go Packages Deploy Obfuscated Remote Payloads in Sophisticated ...

Socket uncovers 11 malicious Go packages with obfuscated payloads targeting Linux/Windows. AI-generated npm malware & supply chain attacks surge....

08-Aug-2025

7 min read

ShinyHunters

Voice Phishing Attack Hits Cisco, Exposing 137K Customer Records

Cisco confirms July 2025 voice phishing attack compromised third-party CRM system, exposing 137,000 customer profiles. Part of ongoing Salesforce attacks....

06-Aug-2025

9 min read