China Hijacks Captive Portals to Spy on Asian Diplomats Summary Google Threat Intelligence researchers attribute a campaign to the Mustang Panda APT (tracked as UNC6384) that hijacked browser captive-portal checks…
‘ZipLine’ Phishers Flip Script as Victims Email First Summary The financially motivated “ZipLine” campaign gets targets to email the attacker first by abusing corporate Contact Us forms. Attackers submit convincing…
Allied spy agencies blame 3 Chinese tech companies for Salt Typhoon attacks Summary Intelligence and cybersecurity agencies from 13 allied countries have jointly published an advisory attributing a global cyber-espionage…
Spanish police arrest student suspected of hacking school system to change grades Summary Spanish police have arrested a 21-year-old student in Seville suspected of hacking the Séneca education management platform…
Licence-plate reader company pauses work with federal agencies after backlash Summary Flock Safety has announced it is pausing work with federal agencies after an Illinois audit found the company allowed…
Hackers use fake NDAs to deliver malware to US manufacturers Summary Cyber actors are abusing companies’ “Contact Us” forms to build credibility, engage targets for up to two weeks, then…
US sanctions Russian national and Chinese company over North Korean IT worker schemes Summary The U.S. Treasury Department (OFAC) announced sanctions targeting individuals and companies tied to a network that…
Who are you again? Infosec experiencing ‘Identity crisis’ amid rising login attacks Summary Cisco-owned Duo warns the security industry is in an “identity crisis” as login attacks climb and confidence…
Salesforce data missing? It might be due to Salesloft breach, Google says Summary Google’s Threat Intelligence Group (GTIG) links a wave of Salesforce data thefts to a compromise of the…
Nx NPM packages poisoned in AI-assisted supply chain attack Summary Nx, a widely used open-source codebase management platform, had multiple malicious versions of its NPM packages published to the registry.…
