Health technology and consumer electronics firm Masimo detected unauthorized activity on its network in late April.
The post Masimo Manufacturing Facilities Hit by Cyberattack appeared first on SecurityWeek.
Russian Hackers Using ClickFix Fake CAPTCHA to Deploy New LOSTKEYS Malware
The Russia-linked threat actor known as COLDRIVER has been observed distributing a new malware called LOSTKEYS as part of an espionage-focused campaign using ClickFix-like social engineering lures.
“LOSTKEYS is capable of stealing files from a hard-coded list of extensions and directories, along with sending system information and running processes to the attacker,” the Google Threat
“LOSTKEYS is capable of stealing files from a hard-coded list of extensions and directories, along with sending system information and running processes to the attacker,” the Google Threat
Cisco Patches CVE-2025-20188 (10.0 CVSS) in IOS XE That Enables Root Exploits via JWT
Cisco has released software fixes to address a maximum-severity security flaw in its IOS XE Wireless Controller that could enable an unauthenticated, remote attacker to upload arbitrary files to a susceptible system.
The vulnerability, tracked as CVE-2025-20188, has been rated 10.0 on the CVSS scoring system.
“This vulnerability is due to the presence of a hard-coded JSON Web Token (JWT) on an
The vulnerability, tracked as CVE-2025-20188, has been rated 10.0 on the CVSS scoring system.
“This vulnerability is due to the presence of a hard-coded JSON Web Token (JWT) on an
LockBit ransomware gang hacked, victim negotiations exposed
The LockBit ransomware gang has suffered a data breach after its dark web affiliate panels were defaced and replaced with a message linking to a MySQL database dump. […]
PowerSchool hacker now extorting individual school districts
PowerSchool is warning that the hacker behind its December cyberattack is now individually extorting schools, threatening to release the previously stolen student and teacher data if a ransom is not paid. […]
CoGUI phishing platform sent 580 million emails to steal credentials
A new phishing kit named ‘CoGUI’ sent over 580 million emails to targets between January and April 2025, aiming to steal account credentials and payment data. […]
Cisco’s Quantum Bet: Linking Small Machines Into One Giant Quantum Computer
Cisco unveils its Quantum Network Entanglement Chip and new Quantum Labs, laying the groundwork for a scalable quantum internet that connects distributed quantum computers into a unified, powerful system.
The post Cisco’s Quantum Bet: Linking Small Machines Into One Giant Quantum Computer appeared first on SecurityWeek.
CodeAnt AI Raises $2 Million for Code Quality and Application Security Platform
Code quality and security firm CodeAnt has secured $2 million in seed funding and it has been valued at $20 million.
The post CodeAnt AI Raises $2 Million for Code Quality and Application Security Platform appeared first on SecurityWeek.
CrowdStrike Plans Layoffs to Pursue $10B ARR Target
CrowdStrike said the planned cuts will affect approximately 500 employees and will span the first half of fiscal 2026.
The post CrowdStrike Plans Layoffs to Pursue $10B ARR Target appeared first on SecurityWeek.
Ox Security Bags $60M Series B to Tackle Appsec Alert Fatigue
Ox Security has raised a total $94 million since its launch in 2021 with ambitious plans to cash in on two fast-moving trends.
The post Ox Security Bags $60M Series B to Tackle Appsec Alert Fatigue appeared first on SecurityWeek.