WordPress Woes Continue Amid ClickFix Attacks, TDS Threats Summary Recent campaigns continue to exploit vulnerable or malicious WordPress plug-ins and weak credentials to compromise sites and funnel visitor traffic to…
Zscaler, Palo Alto Networks Breached via Salesloft Drift Summary Two major security vendors — Zscaler and Palo Alto Networks — were affected by a large-scale supply chain attack after threat…
Summary Jaguar Land Rover (JLR) shut down parts of its IT estate after detecting a “cyber incident” that has severely disrupted retail and production activity. The firm says it is…
Amazon Stymies APT29 Credential Theft Campaign Summary Cybersecurity teams at Amazon disrupted a watering-hole credential-theft campaign attributed to APT29 (also tracked as Midnight Blizzard, Nobelium, Cozy Bear). The actor compromised…
Pennsylvania AG says recovery continues after office refused to pay ransomware gang Summary Pennsylvania’s Attorney General Dave Sunday reported that, three weeks after a ransomware attack discovered on 11 August,…
WhatsApp, Apple warn of highly targeted attacks with zero-day vulnerability Content summary WhatsApp has patched a zero-day vulnerability (CVE-2025-55177) that it says involved incomplete authorisation of linked-device synchronisation messages. The…
Stolen OAuth tokens expose Palo Alto customer data Summary Palo Alto Networks (PAN) has told customers some commercially sensitive data may have been exposed after attackers used OAuth credentials stolen…
Amazon shuts down watering hole attack attributed to Russia’s APT29 hacking group Summary Amazon’s threat intelligence team disrupted a watering hole campaign in August attributed to APT29 (also tracked as…
Nick Andersen appointed to CISA leadership role Summary The Cybersecurity and Infrastructure Security Agency (CISA) has named Nicholas (Nick) Andersen as Executive Assistant Director for Cybersecurity. Andersen began the role…
Zscaler latest victim of Salesloft Drift attacks, customer data exposed Summary Zscaler has confirmed that limited Salesforce data was exposed after attackers stole OAuth tokens from Salesloft’s Drift integration during…
