JSON Config File Leaks Azure ActiveDirectory Credentials Summary Researchers from Resecurity’s HUNTER team discovered an exposed appsettings.json file for an ASP.NET Core application that contained Azure Active Directory ClientId and…
NIST Enhances Security Controls for Improved Patching Summary NIST has released Security and Privacy Control catalogue version 5.2.0 to help organisations be more proactive about patching and software updates. The…
Hackers Are Sophisticated & Impatient — That Can Be Good Summary Ensar Seker explains that modern ransomware groups act like professional SaaS operations: organised, efficient and eager to move on.…
Jaguar Land Rover Shuts Down in Scramble to Secure ‘Cyber Incident’ Summary Jaguar Land Rover (JLR) shut down parts of its IT estate after a reported “cyber incident” that has…
Zscaler, Palo Alto Networks Breached via Salesloft Drift Summary Two major security vendors — Zscaler and Palo Alto Networks — were affected by a widespread supply-chain compromise of the Salesloft…
WordPress Woes Continue Amid ClickFix Attacks, TDS Threats Summary WordPress remains a prime target for cybercriminals. Recent reports highlight two major campaigns: the ClickFix “ShadowCaptcha” operation, which injects fake Google/Cloudflare…
Amazon Stymies APT29 Credential Theft Campaign Summary Amazon’s threat intelligence team detected and disrupted a watering-hole credential theft campaign run by APT29 (also tracked as Midnight Blizzard, Nobelium, Cozy Bear),…
UAE to Implement Cyber Education Initiative Summary The UAE Ministry of Education will introduce compulsory cybersecurity lessons for students in Grades 1–12 starting in the 2025–2026 academic year. Teaching guides…
Varonis Acquires Email Security Provider SlashNext to Enhance BEC Defences Summary Varonis has acquired SlashNext to integrate advanced phishing, business email compromise (BEC) and social‑engineering protections into its Data Security…
Pennsylvania AG says recovery continues after office refused to pay ransomware gang Summary Pennsylvania Attorney General Dave Sunday confirmed that, three weeks after a ransomware attack was discovered on 11…
