Author: Staff Writer

Top Highlights Cybersecurity authorities have identified a critical flaw (CVE-2025-26399) in SolarWinds Web Help Desk, enabling attackers to execute unauthorized commands and potentially take over affected systems. The vulnerability stems from a “deserialization of untrusted data” flaw in the AjaxProxy component, allowing malicious payloads to be executed, giving attackers control over the server. Due to active exploitation, CISA has included this flaw in its Known Exploited Vulnerabilities catalog and mandates federal agencies fix it by March 12, 2026, urging private sector entities to act swiftly. Immediate remedial steps include applying available patches, discontinuing use of the software if patches can’t…

Quick Takeaways The U.S. subsidiary of Ericsson experienced a data breach via a third-party service provider, exposing personal information of 15,661 employees and customers over a five-day attack in April 2025. The breach was caused by a vishing attack targeting a vendor employee, with unauthorized access detected on April 28, 2025, and a lengthy investigation concluding in February 2026. Compromised data includes sensitive details such as names, addresses, Social Security Numbers, IDs, financial and medical records, with no current evidence of misuse. In response, the service provider enhanced security measures, reset passwords, and involved the FBI to track threat actors,…

Fast Facts Researchers disclosed three critical vulnerabilities in NAVTOR NavBox v4.12.0.3, including path traversal, missing authentication, and info leakage, potentially exposing vessel operational data. Attackers could exploit these flaws remotely to access sensitive navigation and operational files, unencrypted telemetry, and internal system details. The vulnerabilities, scored as high risk (CVSS 7.5), have been patched in later versions (from v4.14.1.2 onwards), with affected customers notified. The disclosure highlights growing maritime cyber threats, including a 150% rise in ransomware and increased vulnerabilities in connected ship systems, underscoring industry risks. Underlying Problem Researchers from Cydome have identified three critical vulnerabilities in NAVTOR NavBox…

Fast Facts Cisco warns of two critical privilege-escalation vulnerabilities in IOS XR Software that, if exploited, allow attackers to execute arbitrary root commands or gain full admin control. CVE-2026-20040 involves insufficient validation of CLI commands, enabling low-privileged users to escalate to root privileges; CVE-2026-20046 allows bypassing authorization to fully control affected devices. These vulnerabilities impact all configurations of Cisco IOS XR Software (CVE-2026-20040) and specifically the IOS XRv 9000 routers (CVE-2026-20046); Cisco’s IOS, IOS XE, and NX-OS are unaffected. Cisco recommends immediate upgrade to fixed software versions and, for CVE-2026-20046, applying command authorization workarounds, as no current mitigations exist for…

Essential Insights North Korean threat actors are using sophisticated tactics like obfuscated loaders, AI-generated personas, and private repositories to scam IT workers and developers, primarily targeting US-based sectors like fintech. They pose as recruiters or hiring managers, tricking individuals into executing malicious code during fake technical interviews, often exploiting trust in the recruitment process. These operations have evolved with increased reliance on AI for malware obfuscation, synthetic identity creation, and expanding the platforms used, including Visual Studio Code and npm packages. GitLab’s research identifies over 600 indicators of compromise, aiming to assist industry defenders in recognizing and countering these complex,…

Quick Takeaways AI security is evolving rapidly, but many organizations rushing AI deployment face significant risks—highlighted by incidents like McDonald’s breach due to basic security flaws. Insurers are tightening policies, including exclusions for AI-related incidents, while rewarding firms that adopt AI security tools with premium discounts. Risk assessment methods are shifting from static questionnaires to continuous monitoring and testing of security controls, reflecting the increasing complexity of AI’s role in cyber threats. Policy language is being rewritten to address AI-specific risks, with some companies offering or requiring AI defenses to qualify for lower premiums, hinting at AI’s future as an…

Summary Points Threat actors are successfully tricking HR staff with phishing campaigns involving malicious ISO files embedded in resumés, designed to evade filters and launch sophisticated malware payloads that disable security measures. The malware, including a module dubbed BlackSanta, can shut down endpoint security tools by exploiting kernel drivers, making detection and prevention more challenging for organizations. HR personnel are high-value targets for phishing scams, which often mimic legitimate tasks like resume submissions or termination notices, emphasizing the need for specialized security awareness and training. The rise of AI-generated content complicates detection of malicious communications, underscoring the importance of protocols…

Top Highlights Stryker, a major healthcare equipment provider, was targeted by a likely Iranian-sponsored cyberattack, resulting in data wipeout and disrupted employee access. The attack, attributed to the Iran-backed hacktivist group Handala, involved a high-level intrusion that damaged internal systems and left clear signs of Iranian involvement. This incident highlights the growing threat of nation-state cyberattacks on critical healthcare infrastructure, emphasizing the need for proactive cybersecurity measures. Healthcare organizations must strengthen their defenses and recovery protocols, as geopolitical conflicts increasingly threaten the security and safety of critical medical services. The Issue Stryker, a global leader in medical technology, was hit…

Quick Takeaways Crowell & Moring has strengthened its Privacy and Cybersecurity Group by appointing Rajeev Raghavan, a former FBI cybersecurity prosecutor with over 15 years of experience in cybercrime and technology law. Raghavan’s unique blend of legal expertise and technical knowledge, including prior roles advising on AI and national security at the FBI, enhances the firm’s ability to navigate complex digital and regulatory environments. He will focus on guiding clients through cybersecurity, privacy, and national security issues, including data breach investigations, regulatory responses, and developing tailored risk management strategies. Raghavan’s extensive background in high-profile cybercrime cases and government policy positions…

Top Highlights Stryker’s global networks were disrupted by a cyberattack, with no current evidence of ransomware or malware. The hacking group linked to Iran, Handala, claimed responsibility, evident from their logo on login pages. The attack impacted Stryker’s Microsoft systems, raising concerns about the company’s operational security. Experts note the escalation in targeting high-profile healthcare companies like Stryker amplifies strategic and political tensions. [gptA technology journalist, write a short news story divided in two subheadings, at 12th grade reading level about ‘Medical equipment company Stryker reports cyberattack’in short sentences using transition words, in an informative and explanatory tone, from the…