Amazon Stymies APT29 Credential Theft Campaign Summary Amazon’s security team detected and disrupted a credential-theft operation run by APT29 (aka Midnight Blizzard / Nobelium / Cozy Bear). The threat actor…
WordPress Woes Continue Amid ClickFix Attacks, TDS Threats Summary Recent campaigns continue to leverage vulnerable and malicious WordPress plug-ins and compromised credentials to turn legitimate sites into redirectors and malware…
Varonis Acquires Email Security Provider SlashNext to Enhance BEC Defences Summary Varonis has acquired email-security specialist SlashNext and will fold its multi-channel phishing and social-engineering protections into the Varonis Data…
Summary Amazon’s threat intelligence team disrupted a watering hole campaign in August attributed to Russia’s APT29 (also known as BlueBravo or Cozy Bear). The attackers compromised legitimate websites by injecting…
Nick Andersen appointed to CISA leadership role Summary The Cybersecurity and Infrastructure Security Agency (CISA) announced that Nicholas (Nick) Andersen has begun serving as the agency’s Executive Assistant Director for…
WhatsApp warns of ‘attack against specific targeted users’ Summary Meta has disclosed CVE-2025-55177 in WhatsApp: an “incomplete authorisation” bug in linked-device synchronisation that could let an unrelated user trigger processing…
Cloudflare, Zscaler among companies impacted by Salesloft Drift incident Summary A widespread data-theft campaign exploiting the Salesloft Drift integration has exposed customer data from hundreds of organisations. Incident responders (including…
Traffic to government domains often crosses national borders, or flows through risky bottlenecks Content summary New research by PhD student Rashna Kumar (under an Internet Society Pulse Research Fellowship) mapped…
Europe puts the blame on Russia after GPS jamming disrupts president’s plane Summary A chartered plane carrying European Commission president Ursula von der Leyen lost GPS reception as it approached…
In the rush to adopt hot new tech, security is often forgotten. AI is no exception Summary Cisco Talos scanned the internet and found more than 1,100 Ollama servers exposed…
