Key TakeawaysActive Exploitation: Attackers abused FortiCloud SSO trust to access unrelated customer devices using valid FortiCloud accounts.Emergency Mitigation: Fortinet temporarily…
News
Key TakeawaysSurfshark infrastructure security audit: Independent SecuRing audit found no critical flaws and confirmed strong protection against real-world cyber threats.Real-world…
Unathi Thosago – Parliament of South Africa Unathi Thosago has been appointed chief information officer of South Africa’s Parliament, assuming…
Key TakeawaysContract Termination: The U.S. Treasury canceled all 31 active contracts with Booz Allen Hamilton, due to failures to protect…
Cybercrime leaves no hiding place. In Athens, police dismantled a mobile base station operating from a car that made cyber…
Key TakeawaysOperational Error: A security failure exposed the INC ransomware group infrastructure, containing data exfiltrated from multiple victims.Data Recovery: Cybersecurity…
Key TakeawaysService Impact: A significant outage is preventing enterprise customers in North America from accessing core services like Exchange Online,…
Key TakeawaysTargeted Doxing: A hacker using the alias "Vindex" has leaked the alleged personal data of senior officials from Spain’s…
Key TakeawaysVishing Tactic: Sophisticated voice-based social engineering attacks combined with real-time phishing kits to target employees and steal Okta SSO…
Key TakeawaysUK VPN consultation: Government launches review as Lords vote to ban VPNs for under-18s.House of Lords decision: Peers back…
Key TakeawaysSurfshark Android support update: Ends app updates for Android 5; Android 6+ devices remain fully supported.Reason for change: Older…
Key TakeawaysOpportunistic Threats: An increase in Venezuela-related domain registrations indicates that actors aim to exploit geopolitical uncertainty for financial fraud…
Key TakeawaysUrgency Tactic: Attackers are impersonating LastPass in emails, falsely claiming imminent maintenance to pressure users into "backing up" their…
Key TakeawaysIncident Type: The security event affecting Spanish retailer PcComponentes was a credential stuffing attack, not a direct breach of…
Key TakeawaysMobile Impersonation: Greek authorities have dismantled a criminal operation that used a fake mobile base station hidden in a…
Key TakeawaysGrowing Gap: Almost 70% of organizations cite tool sprawl and visibility gaps impeding cloud security, widening the disconnect between…
Key TakeawaysDeceptive Tactics: Mobile-optimized phishing sites impersonate PNB MetLife to steal policyholder data and facilitate fraudulent transactions.Data Exfiltration: The malicious…
Key TakeawaysSupply Chain Vulnerability: Reports indicate a critical escalation in cyber risks targeting the wholesale and retail sectors through third-party…
Key TakeawaysTargeted Campaign: A cyber campaign, dubbed Operation Nomad Leopard, is actively targeting Afghan government employees with spear-phishing emails.Deceptive Lures:…
Key TakeawaysVulnerability Identified: A misconfigured GraphQL endpoint on the UStrive mentorship platform allowed authenticated users to access the private data…
Get expert insights on threats, breaches, scams, and security trends — delivered every Saturday.
Most Popular