Aggregator

CVE-2025-11371

CVE Trends
2 months ago
Currently trending CVE - Hype Score: 6 - In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild.  This issue impacts ...

Cyberattacks on Poland’s Water Plants: A Blueprint for Hybrid Warfare

Security Affairs
2 months ago
Poland’s ABW confirmed hackers breached ICS at five water plants, gaining ability to alter equipment settings. Russia-linked APT groups suspected. Poland’s Internal Security Agency (ABW) has published a detailed account of a sustained campaign targeting the country’s water plants, documenting security breaches at five water treatment facilities in 2025. The incidents mark one of the […]
Pierluigi Paganini

TCLBANKER Banking Trojan Targets Financial Platforms via WhatsApp and Outlook Worms

The Hackers News
2 months ago
Threat hunters have flagged a previously undocumented Brazilian banking trojan dubbed TCLBANKER that's capable of targeting 59 banking, fintech, and cryptocurrency platforms. The activity is being tracked by Elastic Security Labs under the moniker REF3076. The malware family is assessed to be a major update of the Maverick family, which is known to leverage a worm called SORVEPOTEL to
The Hacker News

Škoda Security Incident Exposes Customers Data From Online Shop

Cyber Security News
2 months ago

Škoda Auto has disclosed a significant IT security incident affecting its official online shop, revealing that unauthorized individuals exploited a vulnerability in the platform’s standard shop software to gain temporary unauthorized access to customer data. During routine technical security monitoring, Škoda’s IT team identified that attackers had leveraged a flaw in the shop’s underlying software […]

The post Škoda Security Incident Exposes Customers Data From Online Shop appeared first on Cyber Security News.

Guru Baran

Hackers Use Fake OpenClaw Installer to Steal Crypto Wallet and Password Manager Credentials

Cyber Security News
2 months ago

A dangerous new infostealer campaign is targeting some of the most sensitive data people store on their computers. Disguised as a legitimate installer for OpenClaw, a popular open-source personal AI assistant, the malware silently takes over systems and goes after over 250 browser extensions tied to crypto wallets and password managers. The campaign has been […]

The post Hackers Use Fake OpenClaw Installer to Steal Crypto Wallet and Password Manager Credentials appeared first on Cyber Security News.

Tushar Subhra Dutta

Managed ad