Understanding the risks and impact of deploying dev-mode in production environments
A third of AI-generated login URLs lead to incorrect or dangerous domains, according to Netcraft
In times of uncertainty, your best defense is to lock down your fundamentals
ASEC Blog publishes Ransom & Dark Web Issues Week 1, July 2025 A new ransomware group named Kawa4096 Tonga’s Ministry of Health hit by INC RANSOM ransomware attack User data from three...
Smarter TV operating systems offer added convenience - but they also introduce new privacy concerns, particularly around automatic content recognition (ACR).
The U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) has levied sanctions against Russia-based bulletproof hosting (BPH) service provider Aeza Group to assist threat...
The spyware operation's exposed customer email addresses and passwords were shared with data breach notification service Have I Been Pwned.
The Nuki smart lock comes with an array of features and works with your existing deadbolt, so you can still use a key.
Using stalkerware is creepy, unethical, potentially illegal, and puts your data and that of your loved ones in danger.
Spain’s Interior Ministry said the suspects were responsible for stealing and leaking personal data belonging to high-ranking political figures, including Prime Minister Pedro Sánchez, President...
The Spanish police have arrested two individuals in the province of Las Palmas for their alleged involvement in cybercriminal activity, including data theft from the country's government. [...]
Cisco has removed a backdoor account from its Unified Communications Manager (Unified CM), which would have allowed remote attackers to log in to unpatched devices with root privileges. [...]
Blind Eagle hackers linked to Russian host Proton66 to target banks in Latin America using phishing and RATs. Trustwave urges stronger security.
Australian airline Qantas alerted customers and authorities about a data breach at a contact center. The industry remains on edge after cyberattacks on airlines elsewhere.
Cybercriminals are extorting the German humanitarian aid group Welthungerhilfe (WHH) for 20 bitcoin. The charity said it will not pay.
Following the disclosure of two local privilege escalation (LPE) vulnerabilities, CVE-2025-6018 and CVE-2025-6019, less than a month ago, that impact major Linux distributions, a new wave of...
Citrix warns that patching recently disclosed vulnerabilities that can be exploited to bypass authentication and launch denial-of-service attacks may also break login pages on NetScaler ADC and...
As U.S. federal agencies sharpen their focus on cyber defense and resilience, new leadership is taking shape across... The post Federal cyber posts see fresh faces amid push to boost national...
Qantas, the largest airline in Australia, confirmed the theft of 6 million customers' personal information.
The Forminator plugin for WordPress is vulnerable to an unauthenticated arbitrary file deletion flaw that could enable full site takeover attacks. [...]
2025-07-01 • ANSSI • ANSSI • elf.goreshell Open article on Malpedia
Unknown threat actors have been observed weaponizing v0, a generative artificial intelligence (AI) tool from Vercel, to design fake sign-in pages that impersonate their legitimate counterparts....
User claims to sell stolen Verizon and T-Mobile data for millions of users (online Verizon says data is old T-Mobile denies any breach and links to it.
The French cybersecurity agency identified Houken, a new Chinese intrusion campaign targeting various industries in France
The Federal Energy Regulatory Commission (FERC) has withdrawn its notice of inquiry and terminated the related rulemaking proceeding... The post FERC ends rulemaking on a CIP reliability standard,...
The Federal Bureau of Investigation (FBI) said that it has recently observed the cybercriminal group Scattered Spider expanding... The post FBI raises alarm over Scattered Spider targeting airline...
SSH Communications Security, a defensive cybersecurity company for humans, systems, and networks, announced on Tuesday its intention to... The post SSH enters into partnership agreement with...
Cybersecurity vendor Forescout Technologies announced Tuesday the appointment of Robert J. Skinner, USAF, retired, and cybersecurity and risk... The post Forescout strengthens advisory board, adds...
Our telemetry shows a surge in Windows shortcut (LNK) malware use. We explain how attackers exploit LNK files for malware delivery. The post Windows Shortcut (LNK) Malware Strategies appeared...
A popular social engineering technique returns: callback phishing, or TOAD attacks, which leverage PDFs, VoIP anonymity and even QR code tricks.