Security Newswire

Research reveals 8 new vulnerabilities among multifunction printers. 

The Trump Administration is moving to collect data retained by the states, leading some privacy experts to express concern. 

WhatsApp is banned from U.S. House of Representatives devices.

The FDA highlights the importance of embedding cybersecurity into medical product manufacturing. 

Myke Lyons, CISO at Cribl, discusses cybersecurity in retail, especially in relation to the recent string of attacks against the sector.

Hackers have reportedly stolen funds from Nobitex, Iran’s largest cryptocurrency exchange. 

A report finds hospitals spend more than $18 billion per year due to violence in the workplace and the community. 

Aflac discovered suspicious activity on its United States network.

A record-breaking data breach occurred, involving the exposure of 16 billion login credentials.

The time frame between the breach and the notice of affected individuals has some cyber experts concerned. 

Radware’s recent ecommerce report found that automated bots accounted for 57% of e-commerce website traffic during the 2024 holiday season.

As conflict rises between Israel and Iran, organizations in the United States are urged to prepare for the possibility of increased cyberattacks from Iran. 

Research reveals a CVSS 8.8 vulnerability, and security leaders are sharing their thoughts. 

Scania, a transport solution organization, has confirmed it faced a cybersecurity incident. 

Scattered Spider, who is believed to be responsible for several cyberattacks against the retail sector in recent months, has apparently shifted targets to the insurance sector. 

Researchers have discovered that the Python Package Index (PyPI) has a malicious package in its repository.

The Washington Post was the subject of a cyberattack. 

Research has identified an unencrypted, non-password-protected database containing 170,360 records.

The Fog ransomware group utilizes an uncommon toolset, including open-source pentesting utilities and an employee monitoring software. 

A former CIA analyst was sentenced to three years and one month in prison for transmitting sensitive data. 

Research shows that more than 40,000 security cameras across the globe are exposed to the internet. 

When given highly complex problems, AI models failed to provide correct answers. 

Rinki Sethi has been hired as Chief Security Officer at Upwind. In this role, Sethi will lead Upwind’s global information security and technology functions.

Security leaders discuss the Whole Foods distributor cyberattack, with insights on attacker motivations as well as risk mitigation strategies.  

A security firm provides details on an incident it faced involving China-linked hackers. 

A new executive order from the Trump Administration rewrites cybersecurity policy, and security leaders are sharing their thoughts. 

Research reveals 6 widely used Google Chrome extensions unintentionally transmit user data over simple HTTP.

A cybersecurity firm believes an iPhone hacking campaign occurred and targeted 5 high-profile Americans. 

A Cisco vulnerability could affect cloud deployments of Cisco Identity Services Engine (ISE) in certain systems. 

Orca Security recently released the 2025 State of Cloud Security Report, finding that 84% of organizations now use AI in the cloud, and 62% of organizations have at least one vulnerable AI package.