Home - Owlysec - Cyber Security News

Mobile Security

Critical eSIM Flaw in Kigen’s eUICC Chips Puts Billions of IoT Devices at Risk

Malware & Threats admin - July 9, 2025 0

A newly discovered security vulnerability in Kigen’s eUICC chip technology poses a serious risk to billions of devices relying on eSIMs, including smartphones and...

Taiwan Warns Public About Data Privacy Risks from TikTok, Weibo, RedNote, and Other China-Linked Apps

Applications admin - July 7, 2025 0

SpyLoan Malware Embedded in Android Loan Apps Exposes 8 Million Users

Android admin - December 2, 2024 0

Google Halts Risky Android App Sideloading in India, Elevating Fraud Prevention

Mobile admin - October 7, 2024 0

Watering Hole Attack on Kurdish Platforms Unleashes Harmful APKs and Spyware

Mobile admin - September 26, 2024 0

Data Leaks

Silent Threats in Source Code: How Exposed Git Repositories Are Opening the Door to Major Breaches

Cybercrime admin - July 10, 2025 0

While ransomware and phishing continue to dominate security conversations, a quieter yet equally dangerous threat is gaining traction: exposed Git repositories leaking sensitive data...

Rethinking Secrets as Unique Identifiers for Non-Human Identity Governance

Cybercrime admin - July 2, 2025 0

Identity-based cyberattacks continue to surge, with stolen credentials now playing a central role in most breaches. Recent data suggests that compromised secrets are involved...

New Vulnerabilities Found in Rack::Static Allow Unauthorized Access and Data Manipulation on Ruby Servers

Data Leaks admin - April 20, 2025 0

Massive Credential Leak: Hacker Group Exposes 30,000 Logins Across Global Digital Services

Cybercrime admin - April 18, 2025 0

SEC Targets Four Firms Over Deceptive Disclosures in SolarWinds Cyber Intrusion

Data Leaks admin - October 25, 2024 0

Ukraine Imposes Telegram Ban on State and Military Personnel

Data Leaks admin - September 21, 2024 0

Silent Threats in Source Code: How Exposed Git Repositories Are Opening the Door to Major Breaches

admin - July 10, 20250

Cybercrime

While ransomware and phishing continue to dominate security conversations, a quieter yet equally dangerous threat is gaining traction: exposed Git repositories leaking sensitive data...

Financial Institutions in Africa Targeted with Open-Source Malware in Ongoing Cybercrime Campaign

Cybercrime admin - July 15, 2025 0

A persistent cybercrime campaign targeting financial organizations across multiple African nations has been uncovered, with attackers leveraging open-source and publicly available tools to establish and maintain unauthorized access within networks. The activity, which began as early as July 2023, is believed to be financially motivated and tied to initial...

U.S. Agencies Warn of Heightened Iranian Cyber Threats Against Critical Infrastructure and Defense Networks

Cybercrime admin - July 14, 2025 0

U.S. cybersecurity and intelligence agencies have issued a joint alert warning organizations of a growing wave of cyber threats linked to Iranian state-sponsored actors and ideologically motivated hacktivist groups. The advisory follows a sharp increase in global cyber activity tied to geopolitical tensions in the Middle East. Officials from agencies...

Batavia Spyware Campaign Targets Russian Firms with Stealthy Windows Malware

Cybercrime admin - July 13, 2025 0

A new cyber-espionage campaign has been uncovered targeting Russian organizations using an undocumented Windows spyware dubbed Batavia, active since at least July 2024. The campaign leverages phishing emails and multilayered malware delivery to steal sensitive documents and system information. According to threat analysts, the attack begins with phishing messages sent...

UK Authorities Arrest Four in £440M Retail Cyber Attack Linked to Scattered Spider Group

Cybercrime admin - July 12, 2025 0

Four individuals have been arrested in the U.K. in connection with a large-scale cyber attack that targeted major retailers including Marks & Spencer, Co-op, and Harrods. The operation is estimated to have caused financial damages ranging between £270 million and £440 million. The arrests were made in the West Midlands...

Critical RCE Flaw in Wing FTP Server Actively Exploited; Patch Urged Immediately

Cybercrime admin - July 11, 2025 0

A critical vulnerability affecting Wing FTP Server is currently being exploited in real-world attacks, posing a severe threat to systems running outdated versions of the software. Tracked as CVE-2025-47812 with a CVSS score of 10.0, the flaw allows unauthenticated attackers to execute arbitrary system commands with elevated privileges. The vulnerability...