Tata-owned Jaguar Land Rover (JLR) has extended its production halt until October 1, 2025, following a cybersecurity incident that disrupted operations on September 2. The pause, initially set to end on September 24, has raised concerns over job security for its 33,000 employees and the impact on the UK supply chain, which supports 104,000 jobs. The hacker group “Scattered Lapsus$ Hunters” claimed responsibility for the breach, highlighting vulnerabilities in JLR’s system. This incident occurs amid …

Cybersecurity researchers from Darktrace have unveiled the ShadowV2 botnet, a sophisticated cybercrime operation exploiting misconfigured Docker containers on Amazon Web Services (AWS) to facilitate distributed denial-of-service (DDoS) attacks. This botnet represents a significant evolution in cyber threats, functioning as a subscription service with an advanced command-and-control framework that includes APIs and user interfaces, allowing clients to execute DDoS attacks seamlessly. The attackers leverage the Python Docker SDK to communicate with exposed Docker daemons, building malicious …

SolarWinds has issued an urgent advisory regarding a critical vulnerability in its Web Help Desk software, identified as CVE-2025-26399, which allows unauthenticated remote code execution (RCE) with a severity rating of 9.8 out of 10. This flaw stems from the deserialization of untrusted data and represents a patch bypass for two previously resolved vulnerabilities, indicating a recurring weakness in the software. SolarWinds has released a hotfix for version 12.8.7 and strongly urges users to install …

GitHub has announced substantial updates to npm security aimed at protecting the open source software community from increasingly sophisticated threats, including the recent Shai-Hulud attack that compromised numerous popular JavaScript packages. The new measures will enforce two-factor authentication (2FA) with FIDO-based WebAuthn and implement short-lived access tokens to reduce the risk of account takeovers and unauthorized publishing. These enhancements also introduce a trusted publishing model, which eliminates the need for API tokens in favor of …

The South Korean presidential office announced plans to implement comprehensive cybersecurity measures following significant hacking incidents affecting major telecom and financial firms. Recent breaches at SK Telecom, KT Corp., and Lotte Card compromised sensitive personal data of millions, prompting concerns over national digital security. President Lee emphasized the need for both private sector accountability and government-led systemic defenses to combat increasingly sophisticated cyber threats, underlining that without robust security, South Korea’s aspirations to dominate in …

In 2024, ongoing geopolitical tensions have intensified as Russia employs cyber-attacks as a strategic weapon, particularly against key industries in nations such as South Korea. The cybercrime group SectorJ149 has executed sophisticated spear-phishing campaigns targeting manufacturing and energy sectors, utilizing advanced malware techniques to exfiltrate sensitive information. This shift from financial motivations to state-oriented cyber-hacktivism underscores a dangerous evolution in Russia’s cyber warfare approach, posing significant risks to global economic resilience and critical infrastructure. As …

Uttar Pradesh’s Additional Chief Secretary for Energy, Narendra Bhooshan, emphasized the critical need for enhanced cybersecurity in the state’s power sector during a recent conference in Lucknow. He highlighted the increasing digitization of the energy sector, which has made it susceptible to cyber threats, including state-sponsored attacks. To address these challenges, Uttar Pradesh has implemented advanced measures such as smart meters with encryption and a Centralized Security Operations Centre (CSOC) for real-time monitoring. Bhooshan outlined …