April 10, 2025

Europcar GitLab Hack Compromises Source Code and Customer Data

A recent cyberattack has exposed customer data at Europcar Mobility Group. Hackers accessed the company's private GitLab repositories and stole sensitive files. The breach revealed source code from mobile apps and personal data from up to 200,000 customers. The threat actor behind the attack attempted extortion. They threatened to leak 37GB of stolen data unless demands were met. The exposed

Europcar Hacked
March 27, 2025

Oracle Cloud Breach Allegations Disputed Amid Confirmed Data Leaks

Oracle faces renewed scrutiny after a threat actor claimed to breach its Oracle Cloud SSO infrastructure. Despite the company’s strong denial, leaked data appears to be real, raising questions about the security of cloud authentication systems. Threat Actor Claims Access to 6 Million Accounts A user named ‘rose87168’ announced they had infiltrated Oracle Cloud’s federated SSO servers. They claimed to

Oracle Ransomware
March 21, 2025

RansomHub Ransomware Affiliates Adopt New ‘Betruger’ Backdoor in Attacks

Cybersecurity researchers from Symantec have uncovered a sophisticated new backdoor named Betruger, recently deployed by affiliates of the notorious RansomHub ransomware-as-a-service (RaaS) group. This custom-built malware significantly enhances the efficiency and stealth of ransomware attacks. What is the Betruger Backdoor? Symantec describes Betruger as an advanced "multi-function" malware, uniquely designed to consolidate several malicious tools into one powerful package. This

RansomHub New Tactics
March 21, 2025

CISA Warns of Active Exploitation in NAKIVO Backup Software Flaw

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has alerted federal agencies about active exploitation of a severe vulnerability in NAKIVO’s Backup & Replication software. Identified as CVE-2024-48248, the flaw allows attackers to access sensitive files remotely, potentially compromising entire infrastructures. Vulnerability Details: CVE-2024-48248 Explained This vulnerability is classified as an absolute path traversal flaw, meaning unauthenticated attackers could remotely

CISA Issues Alert
March 20, 2025

The Changing Landscape of Organised Crime: EU-SOCTA 2025 Report

Organised crime is evolving rapidly. Driven by global instability, digitalisation, and new technologies like artificial intelligence (AI), criminal networks are transforming faster than ever before. The EU’s Serious and Organised Crime Threat Assessment (EU-SOCTA 2025) outlines key changes reshaping organised crime in Europe. Crime as a Destabilising Force Today, organised crime doesn't just threaten public safety—it challenges the stability of

EU SOCTA 2025
January 27, 2025

DeepSeek Halts New Signups Amid Large-Scale Cyberattack

DeepSeek, a fast-growing Chinese AI platform, has suspended new registrations on its DeepSeek-V3 chat platform following a significant cyberattack. The attack has impacted the platform’s services as its popularity continues to soar. Why Did DeepSeek Disable Registrations? DeepSeek gained widespread attention recently with the launch of its advanced AI model, which reportedly matches or exceeds the performance of leading U.S.

DeepSeek