Cyber News & Updates
Breaking news, security alerts, and trending stories from across the cybersecurity landscape.
-

Critical Flaw in Combodo iTop Exposes Systems to Remote Code Execution
A critical security flaw in Combodo iTop, a widely adopted IT service management platform, could allow attackers to achieve remote code execution (RCE) and gain full control over affected systems.
-

Mandiant Warns of Active Exploitation of Critical Triofox Flaw Allowing Remote Access
Mandiant warns of active exploitation of a critical Triofox flaw (CVE-2025-12480) allowing remote code execution, with threat actors UNC6485 bypassing authentication to compromise systems.
-

EU Considers Banning Huawei Telecom Equipment for Member States
The European Union is contemplating a ban on Huawei telecommunications equipment for member states, driven by escalating cybersecurity and national security concerns. This move reflects a growing international apprehension regarding the integration of specific foreign technologies into global telecom networks and aims to fortify critical infrastructure against potential vulnerabilities.
-

Swiss NCSC Warns of iPhone Phishing Scams After Device Loss
The Swiss National Cyber Security Centre (NCSC) has warned iPhone users about a sophisticated phishing campaign that targets owners of lost devices. Scammers send convincing messages to steal Apple ID credentials, enabling them to bypass critical security features like Activation Lock. Users are advised against clicking unsolicited links and to activate Lost Mode immediately for…
-

GlassWorm Malware Resurfaces, Infecting VS Code Extensions with Stealthy Unicode Attack
The GlassWorm malware campaign has re-emerged, targeting the Visual Studio Code (VS Code) ecosystem with a new set of malicious extensions, signaling a persistent threat to developers. This sophisticated, self-propagating worm aims to compromise credentials and cryptocurrency assets using invisible Unicode characters to embed malicious code.
-

German City of Ludwigshafen Suffers Cyberattack, Systems Offline
The German city of Ludwigshafen has taken its ICT systems offline after a cyberattack, disrupting public services and highlighting the vulnerability of critical municipal infrastructure. The incident is under investigation, mirroring a global trend of cyberattacks on local government entities.
-

Lukoil Halts Iraqi Operations at West Qurna-2 Amid Sanctions, Citing Force Majeure
Russian energy giant Lukoil has ceased all operations at Iraq’s West Qurna-2 oilfield and declared force majeure, a direct consequence of escalating international sanctions against Moscow.
-

AI, Quantum, and Data Sovereignty: Reshaping 2026 Cybersecurity Landscape
The year 2026 is poised to redefine enterprise cybersecurity, as experts predict significant shifts driven by the maturation of artificial intelligence, the looming threat of quantum computing, and an increasingly complex global regulatory landscape. These converging forces will necessitate a fundamental re-evaluation of digital trust and security protocols across industries.
-

ClickFix Phishing Campaign Targets Hotel Systems with PureRAT Malware
A sophisticated ClickFix phishing campaign is targeting the global hospitality sector, deploying PureRAT malware to steal sensitive credentials and defraud hotels and customers on booking platforms like Booking.com and Expedia.
-

Germany to Deploy New P-8 Poseidon Sub-Hunting Planes from Norway and Iceland
Germany’s newly acquired P-8A Poseidon maritime patrol aircraft are set to operate from forward bases in Norway and Iceland, significantly bolstering NATO’s surveillance and anti-submarine warfare capabilities across the North Atlantic and Arctic regions.
