Frostbyte10 bugs put thousands of refrigerators at major grocery chains at risk Summary Researchers at Armis uncovered ten vulnerabilities — collectively dubbed “Frostbyte10” — in Copeland E2 and E3 refrigeration…
Microsoft rewarded for security failures with another US government contract Summary The General Services Administration (GSA) has announced a OneGov deal with Microsoft that promises steep discounts on services such…
Summary Palo Alto Networks says attackers used OAuth credentials stolen in the Salesloft Drift breach to access its Salesforce instance and exfiltrate customer business contact details and basic support-case metadata.…
Biden stopped ICE from buying Israeli spyware, but Trump admin allows it to proceed Summary The White House under President Trump has lifted a Biden-era pause that had stopped US…
Zscaler latest victim of Salesloft Drift attacks, customer data exposed Summary Zscaler has confirmed that some of its customers’ Salesforce data was exposed after attackers stole OAuth tokens from Salesloft’s…
Summary The Register reports on a new industry analysis by Sekoia showing commercial surveillanceware firms growing rapidly, charging ever-higher sums for spyware-as-a-service, and largely evading effective oversight. The piece traces…
How big will this Drift get? Cloudflare cops to Salesloft Drift breach Summary Cloudflare has confirmed that its Salesforce instance was accessed after the Salesloft Drift breach, and some customer-related…
Internet mapping and research outfit Censys reveals state-based abuse, harassment Summary Censys, the internet-mapping project-turned-company, has disclosed in a SIGCOMM paper that state-based actors and abusive individuals are trying to…
What is information security (infosec)? Summary Information security (infosec) is the set of policies, procedures and controls that protect information—digital and physical—against unauthorised access, alteration, disruption and destruction. The article…
Hackers Threaten To Submit Artists’ Data To AI Models If Art Site Doesn’t Pay Up Summary Ransomware group LunaLock reportedly breached Artists&Clients, a platform that connects independent artists with clients.…
