TruffleNet and Cloud Abuse at Scale: An Identity Architecture Failure
The recent TruffleNet campaign, first documented by Fortinet, highlights a familiar and uncomfortable truth for security leaders: some of...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
WhatsApp accounts targeted in ‘GhostPairing’ attack
Another draw is that the app is built on end-to-end encryption (E2EE) privacy in which the private keys used to...
China-Aligned Threat Group Uses Windows Group Policy to Deploy Espionage Malware
Dec 18, 2025Ravie LakshmananMalware / Cloud Security A previously undocumented China-aligned threat cluster dubbed LongNosedGoblin has been attributed to a...
HPE OneView Flaw Rated CVSS 10.0 Allows Unauthenticated Remote Code Execution
Dec 18, 2025Ravie LakshmananVulnerability / Enterprise Security Hewlett Packard Enterprise (HPE) has resolved a maximum-severity security flaw in OneView Software...
ThreatsDay Bulletin: WhatsApp Hijacks, MCP Leaks, AI Recon, React2Shell Exploit and 15 More Stories
Dec 18, 2025Ravie LakshmananCybersecurity / Hacking News This week's ThreatsDay Bulletin tracks how attackers keep reshaping old tools and finding...
North Korea-Linked Hackers Steal $2.02 Billion in 2025, Leading Global Crypto Theft
Threat actors with ties to the Democratic People's Republic of Korea (DPRK or North Korea) have been instrumental in driving...
The Power of Large Language Models for Cybersecurity
Our dependence on digital infrastructure has grown exponentially amid unprecedented technological advancements. With this reliance comes an increasingly threatening...
Self-Harm Prevention Kit Guide for Schools: Identifying Risks and Protecting Students
A self-harm prevention kit is becoming an essential part of school safety planning as student mental health challenges continue...
How To Spot Health Insurance Scams This Open Enrollment Season
If you’re in the market for insurance right now, keep an eye out for scammers in the mix. They’re out...
U.S. CISA adds Cisco, SonicWall, and ASUS flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Cisco, SonicWall, and ASUS flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini December 18, 2025 U.S....
GhostPairing campaign abuses WhatsApp device linking to hijack accounts
GhostPairing campaign abuses WhatsApp device linking to hijack accounts Pierluigi Paganini December 18, 2025 Attackers abuse WhatsApp’s device-linking feature to...
2025 Federal Retrospective: The Year of Resilient Innovation
Resiliency has been top of mind in 2025, and recent high-profile CVEs serve as holiday reminders that adversaries aren’t...
The Biggest Cyber Stories of the Year: What 2025 Taught Us
The Biggest Cyber Stories of the Year: What 2025 Taught UsmadhavThu, 12/18/2025 – 10:30 2025 didn’t just test cybersecurity;...
Google releases fast AI model Gemini 3 Flash
A few weeks ago, Google launched the powerful AI model Gemini 3 and now it’s time for a faster variant...
The Case for Dynamic AI-SaaS Security as Copilots Scale
Within the past year, artificial intelligence copilots and agents have quietly permeated the SaaS applications businesses use every day. Tools...
