Amazon Stymies APT29 Credential Theft Campaign Summary Amazon’s threat intelligence team detected and disrupted a watering-hole credential-theft campaign attributed to APT29 (aka Midnight Blizzard, Nobelium, Cozy Bear), a group tied…
WordPress Woes Continue Amid ClickFix Attacks, TDS Threats Summary Recent campaigns continue to show WordPress remains a favoured target for cybercriminals. Researchers have flagged two major issues: a ClickFix campaign…
Zscaler, Palo Alto Networks Breached via Salesloft Drift Content summary Security vendors Zscaler and Palo Alto Networks disclosed limited data exposures after a widespread supply‑chain attack on the Salesloft Drift…
Pennsylvania AG says recovery continues after office refused to pay ransomware gang Summary Pennsylvania’s Attorney General Dave Sunday reported that his office has largely restored its website, phone lines and…
Amazon shuts down watering hole attack attributed to Russia’s APT29 hacking group Summary In August, Amazon’s threat intelligence team detected and disrupted a watering‑hole campaign tied to APT29 (also known…
Nick Andersen appointed to CISA leadership role Summary The Cybersecurity and Infrastructure Security Agency (CISA) has appointed Nicholas (Nick) Andersen as Executive Assistant Director for Cybersecurity. Andersen started on Tuesday.…
How big will this Drift get? Cloudflare cops to Salesloft Drift breach Summary Cloudflare has confirmed that its Salesforce instance was accessed as a result of the Salesloft Drift breach.…
Hackers Threaten To Submit Artists’ Data To AI Models If Art Site Doesn’t Pay Up Summary Ransomware group LunaLock claims to have breached Artists&Clients, a platform connecting independent artists and…
Frostbyte10 Bugs Put Thousands of Refrigerators At Major Grocery Chains At Risk Summary Security researchers at Armis disclosed ten vulnerabilities nicknamed “Frostbyte10” in Copeland E2 and E3 refrigeration/building controllers used…
Hackers Are Sophisticated & Impatient — That Can Be Good Summary Ensar Seker explains that modern ransomware groups behave like sophisticated, professional SaaS businesses: organised affiliates, customer-style “support,” dashboards and…
