Cyber Attacks
Security Awareness Training Requires Strategic Rethink Despite Widespread Adoption
While all enterprises conduct security awareness training, the tangible benefits of these programs remain debatable and require strategic adjustment.
Cyber Attacks
Cyber Attacks
JPCERT warns of rising Japanese data leaks via mobile API abuse and Metabase flaws
Japan’s cybersecurity center reports a sharp increase in web data leaks driven by attackers exploiting mobile APIs and known software vulnerabilities.
Cyber Attacks
Single POST Request Can Freeze Next.js Servers, Researchers Warn
Security researchers report that a single HTTP POST request can cause Next.js servers to hang, posing a denial-of-service risk to web applications.
Cyber Attacks
ASOS Hackers Accessed Employee Account to Send Rogue Push Notifications
Investigation reveals attackers used a compromised employee account to distribute malicious push notifications, accessing limited personal data.
Cyber Attacks
DOJ Charges Ransomware Recovery CEO With Wire Fraud for Secret Payments
Federal prosecutors allege the firm owner secretly paid ransoms while charging victims inflated fees for recovery services that were not provided.
Cyber Attacks
ESET Research: SMBs Demand Advanced Cyber Protection Without Complexity
New research reveals small businesses want robust security tools that are easy to manage, highlighting a market gap in user experience.
Cyber Attacks
Unit 42 Reveals Blinder Tunnel Campaign Targets Iraqi Critical Infrastructure
Palo Alto Networks researchers identify an Iran-nexus operation using fake Dubai Airport recruitment lures and GitHub-based command and control infrastructure to compromise systems.
Cyber Attacks
ESET Research Uncovers Brand Deal Scam Targeting YouTube Creators
Fraudsters send fake sponsorship offers to steal Google account credentials from content creators, according to new analysis.
Cyber Attacks
Microsoft FORGE Lab Shares Lessons on Scaling AI Vulnerability Research to Linux Kernel
Microsoft Security’s FORGE Lab outlines three key lessons from expanding its frontier AI vulnerability research from Windows to the Linux kernel.
Cyber Attacks
Palo Alto Unit 42 Reports Web3 Infrastructure Used in Cloud Supply Chain Attacks
Researchers detail how threat actors exploit Web3 tools and open-source components to breach enterprise cloud environments.
Cyber Attacks
Cisco Talos: AI-Assisted Phishing Campaign Targets Taiwan Research Institutions
A new spear-phishing operation uses real-time AI pages to steal credentials from researchers in Taiwan, impersonating legitimate academic events.
Cyber Attacks
Apple releases iOS 27.2 beta 3 to developers with build 24B5099f
Apple has distributed the third beta iteration of iOS 27.2 to registered developers, introducing minor changes and potential future feature hints.
Cyber Attacks
Attackers hijack .gh, .sl, and .as registries to steal Google certificates
Hackers compromised three country-code top-level domains to obtain unauthorized HTTPS certificates for Google domains, Google said.