Salesloft: Hacker broke into systems in March through GitHub account Summary Salesloft says a threat actor breached its systems by compromising a Salesloft GitHub account in March, then maintained access…
CISA sounds alarm over TP-Link wireless routers under attack Summary The US Cybersecurity and Infrastructure Security Agency (CISA) has warned that multiple vulnerabilities in TP-Link routers are being actively exploited…
PACER buckles under MFA rollout as courts warn of support delays Summary PACER, the US federal court document service, has hit trouble as it makes multifactor authentication (MFA) mandatory for…
Salt Typhoon used dozens of domains, going back five years. Did you visit one? Summary Security researchers at Silent Push have linked 45 domains to the China-aligned espionage group known…
Drift massive attack traced back to loose Salesloft GitHub account Summary New findings from the Mandiant-led investigation into the Salesloft/Drift incident show attackers gained initial access to a Salesloft GitHub…
Dev snared in crypto phishing net, 18 npm packages compromised Summary A developer’s npm account was taken over after he authorised a reset of two-factor authentication following a phishing email.…
The US government has no idea how many cybersecurity pros it employs Summary Auditors at the US Government Accountability Office (GAO) reviewed workforce data from 23 federal agencies (the Department…
WhatsApp’s former security boss claims reporting infosec failings led to ousting Summary Former WhatsApp head of security Attaullah Baig has sued Meta in Northern California federal court, alleging he was…
Whistle-Blower Sues Meta Over Claims of WhatsApp Security Flaws Summary Former WhatsApp head of security Attaullah Baig has filed a lawsuit against Meta in the U.S. District Court for the…
Hackers Hijack npm Packages With 2 Billion Weekly Downloads in Supply Chain Attack Summary In what security researchers are calling one of the largest supply‑chain attacks to date, attackers phished…
