Cyber Attack

Portugal has changed its cybercrime law to protect good-faith security research and to make hacking legal under specific, strict conditions. Daniel Cuthbert identified a new rule in Article 8.o-A, called “Acts not punishable due to public interest in cybersecurity,” which exempts some actions from being illegal that were once seen …

More than 77,000 IP addresses online are at risk from the serious React2Shell remote code execution flaw (CVE-2025-55182). Researchers report that attackers have already breached over 30 organizations in various sectors. React2Shell is a vulnerability that allows unauthorized remote code execution with just one HTTP request. It affects all frameworks …

Marquis Software Solutions has announced a data breach affecting multiple banks and credit unions in the US. Marquis Software Solutions offers data analytics, CRM tools, compliance reporting, and digital marketing to more than 700 banks, credit unions, and mortgage lenders. Marquis reported a ransomware attack on August 14, 2025, in …

According to Cloudflare’s report, Bangladesh has risen in the 3rd largest global source of DDoS attacks in 2025 Q3. Seven of the top ten sources of DDoS attacks are in Asia, with Indonesia being the highest. Indonesia has been the leading source since 2024 Q3 and has consistently ranked high …

A new DDoS attack from the Aisuru botnet reached 29.7 Tbps, setting a world record. This surpasses the previous record of 22 Tbps, broken in Q3 2025 and mitigated by Cloudflare, signaling that multi-terabit attacks are now common for global defenders. Cloudflare’s recent DDoS report shows that Aisuru conducted a …

The Korean National Police arrested suspected four people for hacking over 120,000 IP cameras and selling the footage to a foreign adult website. Police are acting against the operators of the illegal content despite not revealing the suspects or websites, through international cooperation. “The National Office of Investigation announced that …

India’s Civil Aviation Minister K Rammohan Naidu informed the Rajya Sabha that some flights reported Positioning System- GPS spoofing in the vincinity of Indira Gandhi International Airport in New Delhi while using GPS-based landing procedures. In a written reply to a question on GPS spoofing, Mr Naidu told the House …

Writing “#resignation” posted from the verified ID of Bangladesh President Md. Shahabuddin Chuppu. Later, it was posted again with the words “My Facebook ID is hacked. For All Concerns”. Several Bangladeshi media reports said that the President’s Facebook ID was hacked. In the meantime Somoy TV reported in their news …

Research from VulnCheck reveals that a highly skilled threat actor has been running a private Out-of-band Application Security Testing (OAST) service on Google Cloud infrastructure, executing an extensive exploit campaign aimed at over 200 CVEs. Private OAST Domain Raises Red Flags: Security experts at VulnCheck noticed strange behavior linked to …

Cybersecurity and Infrastructure Security Agency (CISA) has mandated federal agencies to protect their industrial control systems due to active exploitation. CVE-2021-26829, a vulnerability in OpenPLC ScadaBR, is now included in the KEV Catalog. This inclusion signals that threat actors are actively weaponizing this specific flaw to target operational technology (OT) …