Hackers Access SonicWall Cloud Firewall Backups, Spark Urgent Security Checks Summary SonicWall disclosed that an unauthorised party gained access to firewall configuration backup files stored in its cloud backup service…
ThreatsDay Bulletin: MS Teams Hack, MFA Hijacking, $2B Crypto Heist, Apple Siri Probe & More Summary This ThreatsDay roundup shows how attackers are combining social engineering, AI-enabled deception and cloud…
SaaS Breaches Start with Tokens – What Security Teams Must Watch Summary Token theft — OAuth access tokens, API keys and session tokens — has emerged as a primary vector…
From Phishing to Malware: AI Becomes Russia’s New Cyber Weapon in War on Ukraine Summary The State Service for Special Communications and Information Protection (SSSCIP) reports a clear uptick in…
Critical Exploit Lets Hackers Bypass Authentication in WordPress Service Finder Theme Summary A critical authentication-bypass vulnerability (CVE-2025-5947, CVSS 9.8) in the Service Finder Bookings plugin—bundled with the Service Finder WordPress…
Tech industry association sues to block Texas ‘censorship’ law age-gating access to apps Summary The Computer & Communications Industry Association (CCIA) has filed suit against Texas to block the Texas…
Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 Accounts Summary Cybersecurity firm Huntress has reported a widespread compromise of SonicWall SSL VPN devices that allowed threat actors to…
Hackers Turn Velociraptor DFIR Tool Into Weapon in LockBit Ransomware Attacks Summary Threat actors associated with Storm-2603 (aka CL-CRI-1040 / Gold Salem) have been observed weaponising Velociraptor — an open-source…
From Detection to Patch: Fortra Reveals Full Timeline of CVE-2025-10035 Exploitation Summary Fortra disclosed the results of its investigation into CVE-2025-10035, a critical deserialization vulnerability in the GoAnywhere Managed File…
175 Malicious npm Packages with 26,000 Downloads Used in Credential Phishing Campaign Summary Security researchers (Socket) have uncovered 175 malicious npm packages that together have been downloaded about 26,000 times…
