WordPress Woes Continue Amid ClickFix Attacks, TDS Threats Summary WordPress remains a prime target for cybercriminals. Recent reports highlight two major campaigns: the ClickFix “ShadowCaptcha” operation, which injects fake Google/Cloudflare…
Pennsylvania AG says recovery continues after office refused to pay ransomware gang Summary Pennsylvania Attorney General Dave Sunday confirmed that, three weeks after a ransomware attack was discovered on 11…
Varonis Acquires Email Security Provider SlashNext to Enhance BEC Defences Summary Varonis has acquired SlashNext to integrate advanced phishing, business email compromise (BEC) and social‑engineering protections into its Data Security…
Amazon shuts down watering hole attack attributed to Russia’s APT29 hacking group Summary Amazon’s threat intelligence team detected and disrupted a watering hole campaign in August that it attributes to…
Nick Andersen appointed to CISA leadership role Summary Nicholas (Nick) Andersen has started as the executive assistant director for cybersecurity at the Cybersecurity and Infrastructure Security Agency (CISA). Andersen previously…
Cloudflare, Zscaler among companies impacted by Salesloft Drift incident Summary Security teams at Cloudflare, Zscaler and Palo Alto Networks have confirmed customer data was stolen after a wide-ranging theft targeting…
In the rush to adopt hot new tech, security is often forgotten. AI is no exception Summary Cisco Talos used Shodan to find more than 1,100 Ollama servers exposed to…
Huawei counts cost of Western bans as UK business withers Summary Huawei’s UK operation has shrunk dramatically since Western restrictions began in 2019. Annual accounts for the year to 31…
Frostbyte10 bugs put thousands of refrigerators at major grocery chains at risk Summary Researchers at Armis discovered ten vulnerabilities collectively dubbed “Frostbyte10” in Copeland E2 and E3 refrigeration/building controllers used…
Stolen OAuth tokens expose Palo Alto customer data Summary Palo Alto Networks (PAN) has told customers that attackers used OAuth credentials stolen in a breach of Salesloft’s Drift to access…
