TP-Link urges immediate updates for Omada Gateways after critical flaws discovery
TP-Link urges immediate updates for Omada Gateways after critical flaws discovery Pierluigi Paganini October 22, 2025 TP-Link warns of critical...
Month: October 2025
TARmageddon flaw in Async-Tar Rust library allows to smuggle extra archives when the library is processing nested TAR files
TARmageddon flaw in Async-Tar Rust library allows to smuggle extra archives when the library is processing nested TAR files Pierluigi...
Canada Fines Cybercrime Friendly Cryptomus $176M
Financial regulators in Canada this week levied $176 million in fines against Cryptomus, a digital payments platform that supports dozens...
Russia’s Coldriver Ramps Up Malware Development After LostKeys Exposure
Google threat researchers in May disclosed LostKeys, a malware used by the Russia state-sponsored cyber-espionage group Coldriver, which has...
Keep Your Enterprise Running No Matter What
Ensuring Branch · Site · Network Resiliency with Dispersive Stealth NetworkingThis post is a quick response from Scott Higgins,...
Iran-Linked MuddyWater Targets 100+ Organisations in Global Espionage Campaign
Oct 22, 2025Ravie LakshmananMalware / Cyber Espionage The Iranian nation-state group known as MuddyWater has been attributed to a new...
Ukraine Aid Groups Targeted Through Fake Zoom Meetings and Weaponized PDF Files
Cybersecurity researchers have disclosed details of a coordinated spear-phishing campaign dubbed PhantomCaptcha targeting organizations associated with Ukraine's war relief efforts...
Chinese Threat Actors Exploit ToolShell SharePoint Flaw Weeks After Microsoft’s July Patch
Oct 22, 2025Ravie LakshmananCyber Espionage / Vulnerability Threat actors with ties to China exploited the ToolShell security vulnerability in Microsoft...
Dataminr to Acquire Cybersecurity Firm ThreatConnect in $290M Deal
Image: Adobe Stock AI-powered threat intelligence company Dataminr has announced plans to acquire cybersecurity firm ThreatConnect in a deal valued...
We need secure products as much as we need security products
Recent events with F5 and SonicWall underline a continuing issue: network infrastructure is constantly under attack, and the cybersecurity industry...
Survey: Cybersecurity Teams Struggling to Keep Pace in the Age of AI
A survey of 1,100 cybersecurity and IT professionals published this week finds more than three quarters (76%) report their...
How to detect disposable email domains without relying on 3rd party APIs and lists
To scale a fraud or bot attack, adversaries need more than just realistic automation. They need infrastructure. A convincing...
From Path Traversal to Supply Chain Compromise: Breaking MCP Server Hosting
TL;DR We discovered a vulnerability in a popular MCP server hosting service that compromised thousands of AI servers and...
Call to ban AI superintelligence could redraw the global tech race between the US and China
Yuval Noah Harari, author and professor at The Hebrew University of Jerusalem, and a signatory to the open letter, added...
Retail Cyberattacks Reveal Hidden Weaknesses In Supply Chain Security
The recent arrests of four suspects linked to cyberattacks on major UK retailers like Marks & Spencer, Co-op and...
