Scattered Spider affiliate given 10 year sentence, ordered to pay $13 million in restitution Summary A federal judge sentenced Noah Michael Urban, 20, to 10 years in prison and ordered…
Colt changes tune, admits data theft as Warlock gang begins auction Summary One week after services were disrupted, UK telco Colt Technology Services has acknowledged that some data was stolen…
Google yet to take down ‘screenshot-grabbing’ Chrome VPN extension Summary Security researchers at Koi Security report that the popular Chrome extension FreeVPN.One has started capturing screenshots of users’ pages shortly…
AI crawlers and fetchers are blowing up websites, with Meta and OpenAI the worst offenders Summary Fastly’s new threat-insights analysis shows automated AI crawlers and on-demand fetchers are generating the…
Orange Belgium mega-breach exposes 850K customers to serious fraud Summary A major data theft at Orange Belgium exposed information tied to 850,000 customer accounts after an intrusion in late July.…
Summary RapperBot (also called Eleven Eleven Botnet or CowBot), a Mirai-derived DDoS-for-hire operation blamed for firing more than 370,000 attacks at about 18,000 victims across 80+ countries, has been taken…
Summary Apple has released emergency patches to fix an actively exploited zero-day vulnerability in the ImageIO framework (CVE-2025-43300). The flaw is an out-of-bounds write that could lead to memory corruption…
Microsoft reportedly cuts China’s early access to bug disclosures, PoC exploit code Summary Microsoft has reportedly tightened who gets early, detailed vulnerability disclosures through its Microsoft Active Protections Program (MAPP).…
Summary ReliaQuest research and industry experts warn that “impersonation-as-a-service” is emerging on underground forums: English-speaking social engineers are in high demand and criminal offerings now bundle training, scripts, tools and…
Honey, I shrunk the image and now I’m pwned Summary Trail of Bits security researchers demonstrated an image-scaling prompt-injection attack that hides malicious instructions inside large images. When vulnerable services…
