Colt changes tune, admits data theft as Warlock gang begins auction Summary One week after services were disrupted, Colt Technology Services has confirmed that some data was stolen in a…
Summary Security researchers at Koi Security report that the popular Chrome extension FreeVPN.One has begun capturing screenshots of users’ pages shortly after each load and sending them to a remote…
Orange Belgium mega-breach exposes 850K customers to serious fraud Summary A significant data theft at Orange Belgium has exposed about 850,000 customer accounts following an intrusion at the end of…
US cops wrap up RapperBot, one of world’s biggest DDoS-for-hire rackets Summary RapperBot (also known as Eleven Eleven Botnet or CowBot), a Mirai-derived DDoS-for-hire network blamed for hundreds of thousands…
Apple rushes out fix for active zero-day in iOS and macOS Summary Apple has issued emergency updates to patch an actively exploited zero-day in its ImageIO framework, tracked as CVE-2025-43300.…
‘Impersonation as a service’ the next big thing in cybercrime Summary Underground forums are increasingly recruiting English-speaking social engineers and offering turnkey services that package training, scripts and tools for…
Honey, I shrunk the image and now I’m pwned Summary Security researchers at Trail of Bits demonstrated an “image scaling” prompt-injection attack that can hide malicious instructions in images so…
Summary A former Eaton developer, Davis Lu (55), has been sentenced to four years in prison after installing a Java “kill switch” on company servers that activated when his network…
Microsoft reportedly cuts China’s early access to bug disclosures, PoC exploit code Summary Microsoft has reportedly reduced the level of detail it shares with some MAPP (Microsoft Active Protections Program)…
Russia Orders State-Backed WhatsApp Rival Pre-Installed On Phones and Tablets Summary From 1 September, Russia will require all smartphones and tablets sold in the country to come with MAX, a…
