Fake Employees Pose Real Security Risks
Fake Employees Pose Real Security Risks Summary The article outlines how AI-generated and otherwise fake job candidates are an escalating security threat. Gartner predicts one in four candidates could be…
Scattered Spider affiliate given 10 year sentence, ordered to pay $13 million in restitution
Scattered Spider affiliate given 10 year sentence, ordered to pay $13 million in restitution Summary Noah Michael Urban, 20, was sentenced to 10 years in federal prison and ordered to…
Prepping the Front Line for MFA Social Engineering Attacks
Prepping the Front Line for MFA Social Engineering Attacks Summary Paul Underwood, Vice President of Security at Neovera, argues that modern threat actors increasingly use high-touch social engineering — often…
Microsoft makes MCP in Visual Studio GA but researchers warn of risks
Microsoft makes MCP in Visual Studio GA but researchers warn of risks Summary Microsoft has declared general availability (GA) of MCP (Model Context Protocol) servers in Visual Studio. Visual Studio…
Apple rushes out fix for active zero-day in iOS and macOS
Summary Apple has released emergency updates to patch an actively exploited zero-day vulnerability in its ImageIO framework (tracked as CVE-2025-43300). The flaw is an out-of-bounds write that can cause memory…
Colt changes tune, admits data theft as Warlock gang begins auction
Colt changes tune, admits data theft as Warlock gang begins auction Summary Colt Technology Services, after initially downplaying the incident, now says some customer data was taken in the cyberattack…
Google yet to take down ‘screenshot-grabbing’ Chrome VPN extension
Google yet to take down ‘screenshot-grabbing’ Chrome VPN extension Summary Security researchers at Koi Security say the FreeVPN.One Chrome extension — installed by more than 100,000 users — began silently…
Orange Belgium mega-breach exposes 850K customers to serious fraud
Orange Belgium mega-breach exposes 850K customers to serious fraud Summary Orange Belgium confirmed a data breach affecting 850,000 customer accounts after an intrusion at the end of July. Stolen records…
US cops wrap up RapperBot, one of world’s biggest DDoS-for-hire rackets
US cops wrap up RapperBot, one of world’s biggest DDoS-for-hire rackets Summary US authorities have dismantled RapperBot (also called Eleven Eleven Botnet or CowBot), a Mirai-derived DDoS-for-hire network blamed for…
Oregon Man Accused of Operating One of Most Powerful Attack ‘Botnets’ Ever Seen
Oregon Man Accused of Operating One of Most Powerful Attack ‘Botnets’ Ever Seen Summary A 22-year-old man from Eugene, Oregon, Ethan Foltz, has been charged in connection with operating ‘Rapper…