Source: The Nation A coordinated law enforcement operation has taken down the dark web data leak and negotiation sites associated with the 8Base ransomware gang. Visitors to the data leak… Read More »8Base Ransomware Data Leak Sites Seized in International Law Enforcement Operation
Apple on Monday released out-of-band security updates to address a security flaw in iOS and iPadOS that it said has been exploited in the wild. Assigned the CVE identifier CVE-2025-24200,… Read More »Apple Patches Actively Exploited iOS Zero-Day CVE-2025-24200 in Emergency Update
Threat actors have been observed leveraging Google Tag Manager (GTM) to deliver credit card skimmer malware targeting Magento-based e-commerce websites. Website security company Sucuri said the code, while appearing to… Read More »Hackers Exploit Google Tag Manager to Deploy Credit Card Skimmers on Magento Stores
In cybersecurity, the smallest crack can lead to the biggest breaches. A leaked encryption key, an unpatched software bug, or an abandoned cloud storage bucket—each one seems minor until it… Read More »⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [10 February]
Given Okta’s role as a critical part of identity infrastructure, strengthening Okta security is essential. This article covers six key Okta security settings that provide a strong starting point, along… Read More »Don’t Overlook These 6 Critical Okta Security Configurations
Threat actors have been observed targeting Internet Information Services (IIS) servers in Asia as part of a search engine optimization (SEO) manipulation campaign designed to install BadIIS malware. “It is… Read More »DragonRank Exploits IIS Servers with BadIIS Malware for SEO Fraud and Gambling Redirects
Zimbra has released software updates to address critical security flaws in its Collaboration software that, if successfully exploited, could result in information disclosure under certain conditions. The vulnerability, tracked as… Read More »Zimbra Releases Security Updates for SQL Injection, Stored XSS, and SSRF Vulnerabilities
Threat actors have been observed exploiting multiple security flaws in various software products, including Progress Telerik UI for ASP.NET AJAX and Advantive VeraCore, to drop reverse shells and web shells,… Read More »XE Hacker Group Exploits VeraCore Zero-Day to Deploy Persistent Web Shells
Cybersecurity researchers have uncovered two malicious machine learning (ML) models on Hugging Face that leveraged an unusual technique of “broken” pickle files to evade detection. “The pickle files extracted from… Read More »Malicious ML Models on Hugging Face Leverage Broken Pickle Format to Evade Detection
A new audit of DeepSeek’s mobile app for the Apple iOS operating system has found glaring security issues, the foremost being that it sends sensitive data over the internet sans… Read More »DeepSeek App Transmits Sensitive User and Device Data Without Encryption