Author: Staff Writer

Fast Facts Carnival Corporation notified approximately 6 million U.S. customers of a cybersecurity breach caused by social engineering, which compromised sensitive personal data including names, IDs, SSNs, and contact details. The breach was detected on April 14, 2026, and confirmed eight days later, with the company conducting a thorough analysis before notifying affected individuals on May 27, 2026. Carnival is offering affected individuals a free 24-month credit monitoring service and requires enrollment by August 31, 2026, using personalized codes. The incident highlights the growing threat of social engineering, emphasizing the need for stronger employee security training and enhanced data privacy…

Summary Points Mobile security threats are escalating with increasingly sophisticated malware and data exfiltration techniques, making Mobile Application Security Testing (MAST) an essential component of modern cybersecurity. The 2026 top MAST tools, evaluated through extensive research and aligned with industry standards like OWASP, prioritize continuous, integrated, and comprehensive security analysis, covering static, dynamic, and API testing. Leading tools like NowSecure and Veracode offer automated, real-device testing and holistic vulnerability management, while solutions like Quokka Q-mast excel in third-party application analysis without source code access. The selection of MAST platforms depends on factors including ease of integration into CI/CD pipelines, support…

Quick Takeaways Malformed DICOM files can exploit decoder vulnerabilities, leading to potential system crashes or code execution. The Orthanc server is vulnerable during image uploads, where crafted DICOM files can cause heap overflow. Attackers can leverage DICOM parsing weaknesses to perform out-of-bounds writes, posing serious security risks to hospital PACS systems. Threats, Attack Techniques, and Targets The main threat involves vulnerabilities in DICOM file parsing, which is critical in medical imaging systems. Attackers target systems that process these files, such as hospitals’ PACS (Picture Archiving and Communication Systems). The attack technique focuses on exploiting weaknesses in how DICOM files are…

Quick Takeaways Veeam addressed a critical vulnerability (CVE-2026-32996) in Backup & Replication version 13.0.1.2067 and earlier, allowing local privilege escalation that could enable deeper system access. The flaw affects Veeam Agent for Microsoft Windows, with a CVSS score of 7.3, and can be exploited by attackers with limited initial access to execute arbitrary commands or move laterally. The vulnerability was fixed in version 13.0.2.29, but delays in applying patches increase risk, as attackers analyze disclosures and exploit unpatched systems soon after release. Organizations should urgently update to the latest version, enforce least-privilege policies, and monitor for suspicious activity to mitigate…

Top Highlights The Silent Ransom Group (SRG), active since 2022 and primarily targeting law firms since 2023, employs social engineering, impersonation, and physical tactics to steal data instead of traditional ransomware, threatening to release or sell it unless paid. Recent tactics by SRG involve impersonating IT staff through calls, phishing emails, or even physical visits, convincing victims to grant remote access or insert external drives for data exfiltration, often using legitimate tools like WinSCP or Rclone to stay under detection. SRG’s approach bypasses antivirus detection by using legitimate remote access tools and avoids encryption, making their campaigns stealthy, with stolen…

Summary Points Attackers now embed malicious activities within normal user behavior, such as cloud syncing or data sharing, making detection through traditional alerts ineffective. AI-driven social engineering and subtle data exfiltration tactics can bypass signature-based detection, risking sensitive data being copied or shared outside authorized channels before detection. Insider misuse and low-and-slow data movements evade traditional signatures, requiring proactive monitoring of data interactions to identify early signs of data compromise. Threat, Attack Techniques, and Targets The modern threat landscape involves AI-powered attackers and AI-enabled users, making attacks more sophisticated and harder to detect. These attackers often blend their activities into…

Summary Points Fake messages warning of YONO app deactivation and demanding Aadhaar updates are circulating via SMS, WhatsApp, and emails, aiming to deceive SBI customers. These scams involve malicious APK files that, once installed, allow attackers to control devices, steal banking credentials, OTPs, and personal data. SBI emphasizes that it never requests Aadhaar updates through unofficial links or APKs, advising customers to only download the official app from legitimate app stores. Users are urged to ignore suspicious messages, report scams, avoid sharing sensitive info through unverified channels, and ensure device security to prevent financial theft. Key Challenge A recent surge…

Fast Facts The FBI reports that the Silent Ransom Group (SRG), a cybercrime gang, has shifted to in-person tactics, convincing employees or insiders to allow physical access, often under false pretenses, to install malware or steal data. SRG primarily engages in data theft and extortion, using methods like remote access, exfiltration to cloud platforms, and threatening to disclose stolen information, rather than traditional ransomware. New tactics include posing as IT support via phone or on-site visits, requesting remote desktop access or inserting malware-laden USB devices, exploiting trust and lack of security awareness. To defend against these threats, employees must be…

Quick Takeaways Cisco disclosed CVE-2026-20223, an unauthenticated API vulnerability in Secure Workload that grants unrestricted tenant-level access, demanding immediate patching or upgrade. The vulnerability exposes critical microsegmentation and workload protections, allowing attackers to alter policies, open communication paths, and undermine zero-trust and compliance controls. The rapid emergence of high-severity vulnerabilities across Cisco products suggests underlying architectural issues, especially in API security, which are often overlooked in mature product portfolios. Organizations should treat these disclosures as a platform risk, proactively review vendor transparency, accelerate patching plans, and reassess their enterprise segmentation architecture’s integrity. Understanding the Cisco Secure Workload Flaw and Its…

Quick Takeaways Infosecurity Europe is the premier cybersecurity event in Europe, happening in London from June 2-4, 2026. The event gathers industry leaders to showcase innovations, share knowledge, and benchmark solutions. It offers expanded content, new zones, stages, networking, demos, and interactive learning experiences. Attendees can make informed investment and security decisions to stay ahead in a rapidly evolving cyber landscape. Event Details and Purpose Infosecurity Europe will take place in London from June 2 to June 4, 2026. It is the biggest gathering for cybersecurity experts in Europe. Every year, the event brings together professionals from the industry. Attendees…