Amazon Stymies APT29 Credential Theft Campaign Summary Amazon’s threat‑intelligence team uncovered and disrupted a sophisticated watering‑hole credential‑theft campaign attributed to APT29 (also tracked as Midnight Blizzard, Nobelium and Cozy Bear).…
WordPress Woes Continue Amid ClickFix, TDS Threats Summary Recent campaigns continue to exploit WordPress sites via malicious or vulnerable plug-ins, stolen credentials and traffic-distribution systems (TDS). The Israel National Digital…
UAE to Implement Cyber Education Initiative Summary The UAE Ministry of Education will introduce compulsory cybersecurity lessons for students in Grades 1–12 beginning in the 2025–2026 academic year. Teaching guides…
WhatsApp Bug Anchors Targeted Zero-Click iPhone Attacks Summary Attackers exploited a WhatsApp vulnerability (CVE-2025-55177, CVSS 5.4) that allowed processing of content from an arbitrary URL on a target device. Combined…
Varonis Acquires Email Security Provider SlashNext to Enhance BEC Defences Summary Varonis has acquired SlashNext to add advanced, multi-channel phishing and business email compromise (BEC) protection to its Data Security…
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware Summary Researchers at Lab52 (S2 Grupo) have identified a new Outlook backdoor used by the Russian state-sponsored group APT28 (aka Fancy Bear)…
Cloudflare Holds Back the Tide on 11.5Tbps DDoS Attack Summary Cloudflare reports it autonomously mitigated hundreds of hyper-volumetric distributed denial-of-service (DDoS) attacks, including a UDP flood that peaked at about…
Hacked Routers Linger on the Internet for Years, Data Shows Summary Emily Austin, a principal security researcher at Censys, found several hundred Ubiquiti routers still displaying “hacked” banners in Internet…
Japan, South Korea Take Aim at North Korean IT Worker Scam Summary Japan, South Korea and the United States convened a joint forum in Tokyo on 26 August to combat…
What is information security (infosec)? Summary Information security (infosec) is the collection of policies, procedures and controls used to safeguard information—digital and otherwise—against unauthorised access, alteration, disruption and destruction. It…
