Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An AI-powered offensive research pipeline developed by two independent Israeli security researchers — dubbed Auto Exploit — uses prompts to a large…
Zscaler, Palo Alto Networks Breached via Salesloft Drift Summary Two major security vendors — Zscaler and Palo Alto Networks — were impacted by a widespread supply-chain attack stemming from the…
WordPress Woes Continue Amid ClickFix, TDS Threats Summary Recent campaigns continue to exploit vulnerable and malicious WordPress plug-ins to compromise sites and monetise traffic. Researchers have flagged two major patterns:…
Amazon Stymies APT29 Credential Theft Campaign Summary Amazon’s security team identified and disrupted a watering-hole credential-theft campaign run by APT29 (also tracked as Midnight Blizzard, Nobelium, Cozy Bear). The adversary…
UAE to Implement Cyber Education Initiative Summary The UAE Ministry of Education will introduce a nationwide cybersecurity programme for students in Grades 1–12 starting in the 2025–2026 academic year. The…
Varonis Acquires Email Security Provider SlashNext to Enhance BEC Defences Summary Varonis has acquired SlashNext to integrate advanced phishing, business email compromise (BEC) and social‑engineering protections into its data security…
Summary The Federal Trade Commission says Disney will pay $10 million to settle allegations it collected personal data from children via YouTube without parental notice or consent, breaching the Children’s…
Summary The Cybersecurity and Infrastructure Security Agency (CISA) has appointed Nicholas (Nick) Andersen as its executive assistant director for cybersecurity. Andersen started the role on Tuesday. He previously served as…
Amazon shuts down watering hole attack attributed to Russia’s APT29 hacking group Summary Amazon’s threat intelligence team disrupted a watering‑hole campaign in August attributed to APT29 (also tracked as BlueBravo/Cozy…
Cloudflare, Zscaler among companies impacted by Salesloft Drift incident Summary A widespread data-theft campaign tied to the Salesloft-owned Drift platform has exposed customer data from hundreds of organisations that integrate…
