A new security vulnerability (CVE-2025-24860) in Apache Cassandra allows unauthorized access and permission escalation due to an authorization bypass in specific authorizer configurations. Affected versions are 4.0.0-4.0.15, 4.1.0-4.1.7, and 5.0.0-5.0.2. Users must upgrade to 4.0.16, 4.1.8, or 5.0.3 to mitigate this risk. Regular security audits are recommended.
Researchers Flag Crypto-Stealing Malware in Google and Apple Apps
Cybersecurity researchers have discovered a cross-platform malware campaign named “SparkCat” that targets cryptocurrency wallet recovery phrases through malicious mobile apps. Cybersecurity researchers at Kaspersky first