News

A significant data breach at 7-Eleven has compromised personal information of over 185,000 individuals. The leaked data includes sensitive details such as names, dates of birth, postal addresses, and Social Security numbers, as confirmed by state government records. This incident highlights the vulnerability of retail chains to cyber attacks and the risks customers face when their information is stored by large corporations. Affected individuals should monitor their accounts for suspicious activity and consider identity theft protection measures. Source: State Government Security Notice.

US federal authorities have successfully shut down a large-scale tech-support scam operation that involved participants from India and the United States working in coordination. The scam typically targeted unsuspecting users by posing as legitimate technical support representatives, convincing victims to grant remote access to their devices or provide sensitive information. The operation involved multiple individuals across both countries in various roles, from executing the scams to managing financial aspects. This takedown represents a significant enforcement action against cross-border cybercriminal networks that have cost consumers substantial amounts through fraudulent technical support claims. Source: IndiaWest.

Microsoft is rolling out a new feature in Defender for Endpoint that automatically isolates infected computers to prevent attackers from spreading across networks. This capability detects when a system is compromised and disconnects it from the network, blocking lateral movement attempts by cybercriminals. The feature is currently in testing phase and aims to reduce response time during security incidents. For Indian organizations relying on Microsoft security tools, this addition strengthens endpoint protection by minimizing damage from breaches before manual intervention occurs. Source: Original announcement.

Reform UK leader Nigel Farage claims Russian hackers infiltrated his phone and disclosed information about a £5 million financial gift. However, cybersecurity specialists have expressed skepticism, requesting concrete evidence to support the allegations. The incident highlights growing concerns about political figures being targeted by state-sponsored cyber operations. Experts emphasize that without substantiated technical proof, such claims remain unverified. This case underscores the importance of proper incident investigation and transparent communication when reporting potential breaches. Source: The Guardian.

ABB has identified a critical vulnerability (CVE-2025-9970) in its LVS MConfig software affecting versions 1.4.9.21 and earlier. The flaw allows local network attackers to extract memory dump files containing plaintext passwords stored in the application's memory. If these dumps are mishandled, attackers could obtain sensitive credentials. The vulnerability impacts critical infrastructure sectors including energy, manufacturing, and water systems worldwide. ABB rates the issue as HIGH severity (CVSS 7.4) and has released MConfig version 1.4.9.22 as a fix. Users are strongly advised to update immediately and implement the defensive measures outlined in product documentation. Source: CISA.

ABB has identified a critical vulnerability in its Ability Zenon Remote Transport software affecting versions 7.50 through 14. The flaw enables attackers to bypass authentication and trigger unauthorized system reboots without proper credentials. The vulnerability (CVE-2025-8754) stems from missing authentication controls in the default configuration. Exploitation requires prior network access to affected systems. The vulnerability impacts critical infrastructure sectors including energy, healthcare, water management, and communications worldwide. Currently, no active exploitation in the wild has been reported. ABB recommends restricting network access to systems running the affected software as a temporary measure. Source: ABB Security Advisory.

ABB B&R has identified a critical vulnerability in the System Diagnostics Manager (SDM) component of its Automation Runtime software affecting versions before 6.3 and Q4.93. The flaw, classified as improper resource locking (CVE-2025-3450), allows unauthenticated network attackers to delete data and cause system outages. The vulnerability has a CVSS score of 10, indicating critical severity. Affected industries include energy, manufacturing, healthcare, and water treatment systems worldwide. B&R has released patched versions 6.3 and Q4.93. The company recommends immediate updates for users running SDM on their systems. SDM is disabled by default in Automation Runtime 6 and should not operate outside secured production networks. Source: ABB Security Advisory.

ABB has identified a heap memory overflow vulnerability (CVE-2025-5517) affecting multiple versions of its Terra AC electric vehicle charging stations worldwide. Attackers could exploit unencrypted OCPP messages to compromise affected chargers, potentially gaining remote control and altering firmware behavior. Impacted models include UL40/80A, UL32A, MID/CE, and JP variants across various firmware versions. ABB recommends users immediately update to patched versions: 1.8.33 or 1.8.34 depending on model. The company also advises against using unencrypted HTTP connections between chargers and management systems, despite OCPP protocol allowing it, to prevent malicious interference.

ABB has identified critical vulnerabilities in its Ability Camera Connect software versions 1.5.0.14 and below, stemming from an outdated VLC media player component (version 2.2.4). The vulnerabilities include heap-based buffer overflow and integer overflow issues that could allow attackers to crash the system or execute arbitrary code. The CVSS score is 9.8, indicating critical severity. ABB has released updates to address these flaws. The software is deployed globally across critical infrastructure sectors including energy, communications, and manufacturing. Users are advised to upgrade to patched versions immediately. Source: ABB Security Advisory.

Eppendorf BioFlo 320 bioreactors, used in healthcare and research facilities worldwide, face a critical vulnerability through hard-coded VNC (Virtual Network Computing) credentials. Attackers with network access can exploit this flaw to gain complete control of the device's user interface and functionality. The vulnerability affects all BioFlo 320 models, with a CVSS severity score of 9.8. Eppendorf has released software updates removing VNC access permanently. Users are advised to verify VNC is disabled, restrict VNC settings to Admin and Supervisor roles, and install Version 5.0 software immediately. The company notes VNC shipped disabled by default but recommends security hardening measures. Source: Eppendorf Security Advisory.

The US Cybersecurity and Infrastructure Security Agency (CISA) has identified a new actively exploited vulnerability in the LiteSpeed cPanel Plugin (CVE-2026-48172) that allows privilege escalation. The flaw has been added to CISA's Known Exploited Vulnerabilities Catalog, which tracks security weaknesses actively used by cyber criminals. While CISA's mandatory patching directive applies only to US federal agencies, the organization urges all businesses and organizations to prioritize fixing such vulnerabilities immediately. Privilege escalation flaws are commonly exploited by attackers to gain unauthorized system access. Organizations should review their systems and apply available patches promptly to prevent exploitation. Source: CISA.

ABB has disclosed a buffer over-read vulnerability (CVE-2025-7745) affecting its AC500 V2 industrial controller used in critical manufacturing, energy, and water sectors worldwide. Attackers exploiting this flaw could intercept fragments of previously sent Modbus telegrams from the programmable logic controller. The vulnerability affects versions 2.5.2 and earlier. The CVSS score of 5.8 indicates medium severity with network-based access possible without authentication. ABB released firmware version 2.5.3 (2016) and later versions to address the issue. Industrial organizations operating AC500 V2 systems should prioritize updating to patched firmware versions immediately. Source: CISA.