Cyber Attack

A previously undocumented backdoor called PATCHCORD actively target telecom and critical information infrastructure (CII) in South Asia. According to Acronis Threat Research Unit (TRU), the backdoor is a C/C++ code that gets into systems using specific tricks, like fake VPN installers pretending to be Afghan Telecom (AFTEL) and telecom management …

Cisco warns customers that it has fixed a serious security hole in firewalls using Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) software. The flaw tracked as CVE-2026-20349, is related to the processing of HTTP requests. An attacker can make a device restart and make a …

A joint warning from the FBI, CISA, the Department of Defense Cyber Crime Center, the NSA, the U.S. Secret Service, and South Korea’s National Police Agency has revealed a serious new attack from the Gunra ransomware group. They are using known Fortinet VPN flaws to get past multi-factor authentication and …

Attackers penetrated into IEH Corporation, a US defense and airspace firm, using a fake link that looked like a real Microsoft sharing link. The hackers got into an employee’s email, which had a lot of private information. IEH Corporation shared news of a security incident in an 8-K form with …

A cyberattack on the U.K.’s Police National Legal Database (PNLD) has put the contact information of over 100,000 police officers and other justice workers at risk. The hack was detected on Sunday, July 26, and the ExfilSquad group calimed they took 135,000 contact records. PNLD is an online legal resource service …

India’s leading state-owned lender Bank of Baroda acknowledged Monday a security incident after reports that approximately 1 terabyte of customer and internal data surfaced online. The incident stemmed from the “compromise of an employee’s email account, resulting in unauthorized access to certain data,” Bank of Baroda said in a post …

A critical flaw with how Dell saves BIOS passwords lets anyone quickly recover these passwords from a flash dump without guessing. The flaw, known as CVE-2026-40639 (DSA-2026-197), comes from a faulty XOR encryption method instead of a real cryptographic hash. Dell keeps BIOS passwords in a special area of the SPI …

Bajaj Auto said on Tuesday that a ransomware attack impacted its systems and its subsidiary, Bajaj Auto Technology Ltd (BATL). This led to quick action by its technical and cybersecurity teams. In a report, the car maker said the cyber attack happened at about 8 am IST on June 23. …

A serious SSRF flaw, called CVE-2026-20230, in Cisco Unified Communications Manager Server is now being used in attacks. Cisco put out security updates for the CVE-2026-20230 flaw on June 3. They warned that attackers could gain full control of the device. “A vulnerability in Cisco Unified Communications Manager (Unified CM) and …

Researchers at cybersecurity firm Paradigm Shift found a new flaw called usbliter8. This flaw can get around main boot protections on many older Apple devices, like iPhones with A12 and A13 chips. The study describes an attack on SecureROM, which is the first code that loads when an Apple device …