45 New Domains Linked to Salt Typhoon, UNC4841 Summary Security researchers at Silent Push uncovered 45 domains tied to China‑backed threat actors Salt Typhoon and UNC4841. Many domains were registered…
The Critical Failure in Vulnerability Management Summary This commentary by Amar Ramakrishnan argues that the vulnerability management market is floundering despite an ever-growing number of vulnerabilities. Vendors focused on surfacing…
Kazakh oil giant denies cyberattack, says incident was ‘planned’ phishing drill Summary Indian security firm Seqrite published research claiming a new Russia-linked group, “NoisyBear”, had compromised a KazMunayGas finance mailbox…
Nepal social media ban sparks protests, dozens injured Summary At least 14 people were reportedly killed and dozens injured after police clashed with predominantly young protesters in Kathmandu over a…
Cyberattack on Jaguar Land Rover threatens to hit British economic growth Summary A cyberattack has “severely disrupted” Jaguar Land Rover (JLR), forcing many staff to stay home and prompting temporary…
US sanctions companies behind cyber scam centres in Cambodia, Myanmar Summary The US Treasury Department announced sanctions on multiple people and businesses tied to large-scale cyber scam compounds operating in…
CISA sounds alarm over TP-Link wireless routers under attack Summary The US Cybersecurity and Infrastructure Security Agency (CISA) has warned that multiple vulnerabilities in TP-Link routers are being actively exploited…
PACER buckles under MFA rollout as courts warn of support delays Summary PACER, the US federal courts’ public access system for court documents, has struggled as it rolls out mandatory…
Salt Typhoon used dozens of domains, going back five years. Did you visit one? Summary Security researchers at Silent Push have linked 45 domains to the China-aligned espionage group known…
How huge breach started: Drift attackers gained entry via a Salesloft GitHub account Summary The Register reports that the Salesloft–Drift incident began when attackers gained access to a Salesloft GitHub…
