No evidence of systems breach as hacker group claims employee data exposure https://etimg.etb2bimg.com/thumb/msid-133147559,imgsize-6566,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/no-evidence-of-systems-breach-as-hacker-group-claims-employee-data-exposure.jpg IT services provider HCLTech has said its initial investigation found no evidence of a breach of the company’s systems or any impact on client engagements following claims by a hacker group regarding the potential exposure of employee-related data. In a stock exchange filing, HCLTech said it was ...
Read More »Vulnerabilities & Exploits
Attackers Exploit SharePoint Authentication Bypass After Public PoC Release
Attackers Exploit SharePoint Authentication Bypass After Public PoC Release https://firewall.firm.in/wp-content/uploads/2026/08/poc.jpg Ravie LakshmananAug 13, 2026Vulnerability / Enterprise Security Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the release of a proof-of-concept (PoC) code. The vulnerability in question is CVE-2026-55040 (CVSS score: 9.1), which refers to a critical security feature bypass that stems from weak authentication. It ...
Read More »BoB data breach puts spotlight on banking cybersecurity as sensitive customer records surface on Dark Web
BoB data breach puts spotlight on banking cybersecurity as sensitive customer records surface on Dark Web https://etimg.etb2bimg.com/thumb/msid-132725840,imgsize-17566,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/bob-data-breach-puts-spotlight-on-banking-cybersecurity-as-sensitive-customer-records-surface-on-dark-web.jpg The alleged data breach at Bank of Baroda (BoB) is triggering fresh concerns over cybersecurity posture as well as preparedness in India’s banking sector after sensitive customer records, including Know Your Customer (KYC) documents, surfaced on the dark web. The incident has the ...
Read More »Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers
Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers https://firewall.firm.in/wp-content/uploads/2026/08/rovo.jpg Attacker-controlled instructions can make Atlassian’s Rovo assistant collect Jira or Confluence data that a signed-in user can access, then send it to an outside server. Two security firms found that behavior independently, by different routes. Only one of those routes is confirmed closed. PromptArmor, an AI ...
Read More »Anthropic’s Claude models breached production systems of 3 companies during security tests
Anthropic’s Claude models breached production systems of 3 companies during security tests https://etimg.etb2bimg.com/thumb/msid-132780792,imgsize-29094,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/anthropics-claude-models-breached-production-systems-of-3-companies-during-security-tests.jpg Anthropic went looking through its own logs after OpenAI admitted its models had hacked Hugging Face. It found three companies whose production systems its own Claude models had broken into. Two of them had no idea until Anthropic phoned to tell them. The third has not been ...
Read More »New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables
New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables https://firewall.firm.in/wp-content/uploads/2026/08/NatJack.jpg Swati KhandelwalAug 07, 2026Network Security / Vulnerability Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) connection state to hijack active TCP sessions, spoof DNS responses, expose mapped ports, and exhaust NAT tables. Presented at Black Hat USA 2026, ...
Read More »India’s average data breach cost rises to record Rs 25.5 crore in 2026
India’s average data breach cost rises to record Rs 25.5 crore in 2026 https://etimg.etb2bimg.com/thumb/msid-132820611,imgsize-193368,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/indias-average-data-breach-cost-rises-to-record-rs-25-5-crore-in-2026.jpg The average cost of a data breach in India rose to a record Rs 25.5 crore in 2026, marking a 15.9 per cent increase from Rs 22 crore last year, according to IBM’s 2026 Cost of a Data Breach Report released on Monday. The report said ...
Read More »Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk
Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk https://firewall.firm.in/wp-content/uploads/2026/07/chinese-hackers.jpg A Chinese-speaking threat actor is suspected to be behind a fresh wave of cyber attacks targeting government organizations mainly located in Central Asia, including Afghanistan, Kyrgyzstan, Tajikistan, Uzbekistan, Kazakhstan, and the Syrian Arab Republic, since January 2025. These targeted organizations operate across several sectors, such as healthcare, research, government ...
Read More »Australian regulator says Telegram breached online safety law
Australian regulator says Telegram breached online safety law https://etimg.etb2bimg.com/thumb/msid-132725875,imgsize-17457,width-1200,height=627,overlay-etciso,resizemode-75/data-breaches/australian-regulator-says-telegram-breached-online-safety-law.jpg Australia’s cyber safety watchdog took court action Thursday against Telegram, alleging the global messaging platform had failed to remove terrorism material. Under Australia’s online safety law, Telegram faces a maximum penalty of up to AU$54.6 million ($38 million). The development comes a day after Russia announced it was seeking the arrest ...
Read More »DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware
DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware https://firewall.firm.in/wp-content/uploads/2026/07/all-secure.jpg Ravie LakshmananJul 30, 2026Malvertising / Cryptocurrency Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campaign that involves redirecting users to fake web pages displaying a full-screen non-existent update sequence to deliver malware as part of a new iteration of the long-running Contagious ...
Read More »
Firewall Security Company India Complete Firewall Security Solutions Provider Company in India











