Nothing Found

It seems we can’t find what you’re looking for. Perhaps searching can help.

Sednit abuses XSS flaws to hit gov't entities, defense companies

Sednit abuses XSS flaws to hit gov’t entities, defense companies

AndyC 16 May 2025

Operation RoundPress targets webmail software to steal secrets from email accounts belonging mainly to governmental organizations in Ukraine and defense contractors in the EU 15...

Read More

Operation RoundPress

Operation RoundPress

AndyC 16 May 2025

This blogpost introduces an operation that we named RoundPress, targeting high-value webmail servers with XSS vulnerabilities, and that we assess with medium confidence is run...

Read More

How can we counter online disinformation? | Unlocked 403 cybersecurity podcast (S2E2)

How can we counter online disinformation? | Unlocked 403 cybersecurity podcast (S2E2)

AndyC 14 May 2025

Ever wondered why a lie can spread faster than the truth? Tune in for an insightful look at disinformation and how we can fight one...

Read More

Catching a phish with many faces

Catching a phish with many faces

AndyC 10 May 2025

Here’s a brief dive into the murky waters of shape-shifting attacks that leverage dedicated phishing kits to auto-generate customized login pages on the fly Camilo...

Read More

Beware of phone scams demanding money for ‘missed jury duty’

Beware of phone scams demanding money for ‘missed jury duty’

AndyC 8 May 2025

When we get the call, it’s our legal responsibility to attend jury service. But sometimes that call won’t come from the courts – it will...

Read More

Toll road scams are in overdrive: Here’s how to protect yourself

Toll road scams are in overdrive: Here’s how to protect yourself

AndyC 7 May 2025

Have you received a text message about an unpaid road toll? Make sure you’re not the next victim of a smishing scam. Phil Muncaster 06...

Read More

BSidesLV24 – GroundFloor – Adversaries Also Lift & Shift: Cloud Threats Through The Eyes Of An Adversary

BSidesLV24 – GroundFloor – Adversaries Also Lift & Shift: Cloud Threats Through The Eyes Of An Adversary

AndyC 18 May 2025

Shields up US retailers. Scattered Spider threat actors can target them

Shields up US retailers. Scattered Spider threat actors can target them

AndyC 18 May 2025

U.S. CISA adds Google Chromium, DrayTek routers, and SAP NetWeaver flaws to its Known Exploited Vulnerabilities catalog

U.S. CISA adds Google Chromium, DrayTek routers, and SAP NetWeaver flaws to its Known Exploited Vulnerabilities catalog

AndyC 18 May 2025

Beware! A threat actor could steal the titles of your private (and draft) WordPress posts!

Beware! A threat actor could steal the titles of your private (and draft) WordPress posts!

AndyC 17 May 2025

Pwn2Own Berlin 2025 Day Two: researcher earned 150K hacking VMware ESXi

Pwn2Own Berlin 2025 Day Two: researcher earned 150K hacking VMware ESXi

AndyC 17 May 2025