Krispy Kreme: Over 160,000 people had data stolen during November 2024 cyberattack

A Krispy Kreme spokesperson said the “vast majority of those affected are Krispy Kreme employees, members of their families, and former employees.”

The Record from Recorded Future News – ​Read More

In Other News: Viasat Hacked by China, Washington Post Cyberattack, Crowhammer

Noteworthy stories that might have slipped under the radar: China’s Salt Typhoon targeted Viasat, Washington Post emails compromised in hack, Rowhammer attack named Crowhammer.

The post In Other News: Viasat Hacked by China, Washington Post Cyberattack, Crowhammer appeared first on SecurityWeek.

SecurityWeek – ​Read More

How to Lock Down the No-Code Supply Chain Attack Surface

Securing the no-code supply chain isn’t just about mitigating risks — it’s about enabling the business to innovate with confidence.

darkreading – ​Read More

Aflac says it stopped ransomware attack launched by ‘sophisticated cybercrime group’

Insurance industry giant Aflac said it disrupted a cyberattack within hours of discovering it and is now working to determine how much data was potentially breached in the incident.

The Record from Recorded Future News – ​Read More

Godfather Android Trojan Creates Sandbox on Infected Devices

The Godfather Android trojan uses on-device virtualization to hijack legitimate applications and steal users’ funds.

The post Godfather Android Trojan Creates Sandbox on Infected Devices appeared first on SecurityWeek.

SecurityWeek – ​Read More

Motors Theme Vulnerability Exploited to Hack WordPress Websites

Threat actors are exploiting a critical-severity vulnerability in Motors theme for WordPress to change arbitrary user passwords.

The post Motors Theme Vulnerability Exploited to Hack WordPress Websites appeared first on SecurityWeek.

SecurityWeek – ​Read More

New Mocha Manakin Malware Deploys NodeInitRAT via Clickfix Attack

Red Canary uncovers ‘Mocha Manakin,’ a new threat using paste and runs to deliver custom NodeInitRAT malware, potentially leading to ransomware. Learn to protect your systems.

Hackread – Latest Cybersecurity, Hacking News, Tech, AI & Crypto – ​Read More

FreeType Zero-Day Found by Meta Exploited in Paragon Spyware Attacks

WhatsApp told SecurityWeek that it linked the exploited FreeType vulnerability CVE-2025-27363 to a Paragon exploit.

The post FreeType Zero-Day Found by Meta Exploited in Paragon Spyware Attacks appeared first on SecurityWeek.

SecurityWeek – ​Read More

Cloudflare Tunnels Abused in New Malware Campaign

A threat actor is abusing Cloudflare Tunnels for the delivery of a Python loader as part of a complex infection chain.

The post Cloudflare Tunnels Abused in New Malware Campaign appeared first on SecurityWeek.

SecurityWeek – ​Read More

161,000 People Impacted by Krispy Kreme Data Breach

Krispy Kreme is sharing more information on the data breach resulting from the ransomware attack targeting the company in 2024. 

The post 161,000 People Impacted by Krispy Kreme Data Breach appeared first on SecurityWeek.

SecurityWeek – ​Read More