NIST Enhances Security Controls for Improved Patching Summary The US National Institute of Standards and Technology (NIST) has revised its Security and Privacy Control catalogue (now v5.2.0) to help organisations…
JSON Config File Leaks Azure Active Directory Credentials Summary Researchers from Resecurity’s HUNTER team found a publicly accessible ASP.NET Core configuration file (appsettings.json) that exposed Azure Active Directory credentials —…
WordPress Woes Continue Amid ClickFix Attacks, TDS Threats Summary Recent investigations show renewed waves of attacks targeting WordPress. Israel’s National Digital Agency detailed the ‘ShadowCaptcha’ ClickFix campaign that uses fake…
Zscaler, Palo Alto Networks Breached via Salesloft Drift Summary Two major security vendors, Zscaler and Palo Alto Networks, were among hundreds of organisations affected by a broad supply-chain compromise of…
Jaguar Land Rover Shuts Down in Scramble to Secure ‘Cyber Incident’ Summary Jaguar Land Rover shut down parts of its IT systems after a cyber incident that has severely disrupted…
Summary Amazon’s security team disrupted a watering-hole credential-theft campaign run by APT29 (aka Midnight Blizzard/Nobelium/Cozy Bear) that redirected victims from compromised legitimate sites to fake Cloudflare verification pages and then…
WhatsApp, Apple warn of highly targeted attacks with zero-day vulnerability Summary WhatsApp has patched a zero-day vulnerability (CVE-2025-55177) tied to incomplete authorisation of linked-device synchronisation messages that could cause a…
Summary Nicholas (Nick) Andersen has taken over as executive assistant director for cybersecurity at the Cybersecurity and Infrastructure Security Agency (CISA), starting 2 September 2025. Andersen previously served as principal…
Pennsylvania AG says recovery continues after office refused to pay ransomware gang Summary On 11 August the Pennsylvania Office of the Attorney General discovered a ransomware attack. Attorney General Dave…
Amazon shuts down watering hole attack attributed to Russia’s APT29 hacking group Summary Amazon’s threat intelligence team disrupted a watering-hole campaign in August attributed to Russia’s APT29 (also tracked as…
