A China-linked cyberespionage group known as Fire Ant has been exploiting vulnerabilities in VMware ESXi and F5 systems since early 2025, targeting secure and segmented infrastructures. According to Sygnia, these attacks highlight the ongoing vulnerability of virtualization and networking platforms critical to enterprise operations, and reinforce the urgency for patching and rigorous segmentation of sensitive systems.
Source: Security Affairs
Critical Vulnerability in Popular WordPress Plugin Leaves 400,000 Sites at Risk
The widely-used Post SMTP email delivery plugin for WordPress contains a severe vulnerability that could enable full website takeover. With nearly half of affected sites reportedly still unpatched, administrators are urged to update immediately and check their security configurations to prevent exploitation.
Source: Security Week
Allianz Life Data Breach Affects Over 1.4 Million Customers
Allianz Life has confirmed a significant data breach that compromised most of its 1.4 million customers after a threat actor used social engineering to breach a third-party CRM system. The incident underscores the persistent risks introduced by third-party vendors and the importance of robust supply-chain security reviews.
Source: Security Affairs
Scattered Spider Ramps Up VMware ESXi Attacks on U.S. Critical Infrastructure
The notorious cybercrime group Scattered Spider is executing a wave of attacks on VMware ESXi hypervisors, aiming at critical sectors including retail, airlines, and transportation. Leveraging sophisticated social engineering tactics rather than software exploits, the group’s methods highlight the continued vulnerability of virtualized environments to credential-based and insider-driven attacks.
Source: The Hacker News
Third-Party and Fourth-Party Risks Escalate in Supply Chain Security Landscape
Recent research shows that breaches via third-party involvement have doubled to nearly 30% of incidents this year, but many organizations still overlook the risks from fourth-party (vendors-of-vendors) connections. The hidden threat posed by less-visible links in the vendor ecosystem requires renewed focus and deeper due diligence to prevent cascading breaches.
Source: Help Net Security
Critical Flaws in Niagara Framework Threaten Smart Building and Industrial Automation Systems
Researchers uncovered more than a dozen vulnerabilities in Tridium's Niagara Framework, a system widely used in smart buildings and industrial environments. Misconfigured deployments that disable encryption are especially at risk, and attackers could potentially compromise entire operational environments if these flaws are left unpatched.
Source: The Hacker News
FBI Issues Urgent Warning: Apply 2FA on Windows and Linux Systems
The FBI is urging both Windows and Linux users to enable two-factor authentication amid a surge in credential theft and account hijackings. The warning highlights the ongoing risk of password compromises and the need for organizations and individuals to adopt stronger authentication measures as a matter of urgency.
Source: Forbes Security
You May Also Be Interested In... Arizona Woman Jailed for Helping North Korea in $17M IT Job Scam
Viral Tea App Breached, Exposing 13,000 Private User Images
The Legal Minefield of Hacking Back