Drift massive attack traced back to loose Salesloft GitHub account Summary New findings from a Mandiant-led probe reveal the root cause of the Salesloft / Drift supply-chain intrusion: attackers gained…
WhatsApp’s former security boss claims reporting infosec failings led to ousting Summary Former WhatsApp head of security Attaullah Baig has sued Meta in a Northern California federal court, alleging he…
Whistle-Blower Sues Meta Over Claims of WhatsApp Security Flaws Summary Attaullah Baig, the former head of security for WhatsApp, has filed a lawsuit in the U.S. District Court for the…
Hackers Hijack npm Packages With 2 Billion Weekly Downloads in Supply Chain Attack Summary Attackers compromised an npm package maintainer via a phishing campaign that used a domain impersonating the…
Signal Rolls Out Encrypted Cloud Backups, Debuts First Subscription Plan at $1.99/Month Summary Signal has started rolling out an opt-in, end-to-end encrypted cloud backup feature in its Android beta. The…
Jaguar Land Rover Extends Shutdown After Cyber Attack Summary Jaguar Land Rover (JLR) has extended the shutdown of its UK and overseas factories after a cyberattack forced the company to…
All 54 Lost Clickwheel iPod Games Have Been Preserved for Posterity Summary Classic iPod fans have completed a long-running preservation project and gathered all 54 official clickwheel games into a…
Plex Suffers Security Incident Exposing User Data and Urging Password Resets Summary Plex has notified users of a security incident in which an unauthorised third party accessed one of its…
Salesloft Breached via GitHub Account Compromise Summary A threat actor tracked as UNC6395 compromised Salesloft’s GitHub account earlier this year. The intruder exfiltrated data from multiple Salesloft repositories and used…
‘MostereRAT’ Malware Blends In, Blocks Security Tools Summary Fortinet’s FortiGuard Labs has detailed a phishing-driven campaign deploying a banking-malware-turned-RAT dubbed “MostereRAT.” The threat targets Windows users (so far reported in…
