Salesforce: Some Customer Data Accessed via Gainsight Breach
The highly publicized data breaches earlier this fall of Salesforce customers that was linked to Salesloft’s Drift application is...
mobile security
The Security Landscape of Mobile Apps in Africa
CyLab-Africa researchers partner with mobile security provider for summer collaboration experience Researchers from CyLab-Africa and the Upanzi Network recently partnered with...
This Week in Scams: DoorDash Breach and Fake Flight Cancellation Texts
Leading off our news on scams this week, a heads-up for DoorDash users, merchants, and Dashers too. A data breach...
Ghost Tapping: What It Is, How It Works, and How to Stay Safe
Contactless payments make everyday purchases fast and easy. Yet with that convenience comes a risk: ghost tapping. In crowded spaces...
NDSS 2025 – Understanding Miniapp Malware: Identification, Dissection, And Characterization
———– SESSIONSession 3C: Mobile Security ———– ———– Authors, Creators & Presenters: Yuqing Yang (The Ohio State University), Yue Zhang...
NDSS 2025 – The Skeleton Keys: A Large Scale Analysis Of Credential Leakage In Mini-Apps
———– SESSIONSession 3C: Mobile Security ———– ———– Authors, Creators & Presenters: Yizhe Shi (Fudan University), Zhemin Yang (Fudan University),...
Venmo 101: Making Safer Payments with the App
As the holiday season ramps up, so do group dinners, shared travel costs, gift exchanges, and all the little moments...
4 U.S. Citizens, Ukrainian Plead Guilty in N. Korea IT Worker Scheme
There’s been extensive changes in cybersecurity policy in the shift from the Biden to Trump Administration, but one area...
NDSS 2025 – EvoCrawl: Exploring Web Application Code And State Using Evolutionary Search
SESSIONSession 3C: Mobile Security ———– ———– Authors, Creators & Presenters: Xiangyu Guo (University of Toronto), Akshay Kawlay (University of...
Microsoft Fends Off Massive DDoS Attack by Aisuru Botnet Operators
Microsoft late last month was the victim of a massive distributed denial-of-service (DDoS) attack by threat actors using the...
NDSS 2025 – Spatial-Domain Wireless Jamming With Reconfigurable Intelligent Surfaces
SESSIONSession 3B: Wireless, Cellular & Satellite Security ———– ———– Authors, Creators & Presenters: Philipp Mackensen (Ruhr University Bochum), Paul...
Google Uses Courts, Congress to Counter Massive Smishing Campaign
Google is taking a multi-pronged approach to stopping a widespread global smishing operation that targeted more than a million...
This Week in Scams: New Alerts for iPhone and Android Users and a Major Google Crackdown
Welcome back to another This Week in Scams. This week, have attacks that take over Androids and iPhones, plus news that...
Anthropic Claude AI Used by Chinese-Back Hackers in Spy Campaign
A Chinese nation-state threat group abused Anthropic’s Claude AI model in a series of cyberespionage attacks that the AI...
The Limitations of Google Play Integrity API (ex SafetyNet)
Updated November 2025 This overview outlines the history and use of Google Play Integrity API and highlights some limitations....
![Sectigo New Public Roots and Issuing CAs Hierarchy [2025 Migration Guide]](https://certera.com/blog/wp-content/plugins/wp-postratings/images/stars/rating_on.gif)