Google Chrome Extension is Intercepting Millions of Users’ AI Chats
A Chrome extension that promises security and privacy, has received good ratings from users and a “Featured” badge from Google,...
network security
Hackers Steal Personal Data in 700Credit Breach Affecting 5.6 Million
A data breach at a company that offers credit reports, identity verification, and other services for about 18,000 auto dealerships...
NDSS 2025 – Evaluating Users’ Comprehension and Perceptions of the iOS App Privacy Report
Session 6A: LLM Privacy and Usable Privacy Authors, Creators & Presenters: Xiaoyuan Wu (Carnegie Mellon University), Lydia Hu (Carnegie Mellon...
ShadyPanda’s Years-Long Browser Hack Infected 4.3 Million Users
A threat group dubbed ShadyPanda spent seven years uploading seemingly legitimate extensions into browser marketplaces, building trust among its growing...
Cybersecurity Coalition to Government: Shutdown is Over, Get to Work
A cybersecurity industry group comprising almost two dozen tech heavyweights – including Google, Cisco, CrowdStrike, and Microsoft – are...
NDSS 2025 – Machine Learning-Based loT Device Identification Models For Security Applications
Session4A: IoT Security Authors, Creators & Presenters: Eman Maali (Imperial College London), Omar Alrawi (Georgia Institute of Technology), Julie...
Salesforce: Some Customer Data Accessed via Gainsight Breach
The highly publicized data breaches earlier this fall of Salesforce customers that was linked to Salesloft’s Drift application is...
SEC Dismisses Remains of Lawsuit Against SolarWinds and Its CISO
The Securities and Exchange Commission (SEC) this week dismissed what remained of its two-year-old, high-profile lawsuit against SolarWinds and...
Fortinet FortiWeb Authentication Bypass and Command Injection Vulnerability (CVE-2025-64446/CVE-2025-58034) Notice
Overview Recently, NSFOCUS CERT detected that Fortinet issued a security bulletin to fix the FortiWeb authentication bypass and command...
NDSS 2025 – Understanding Miniapp Malware: Identification, Dissection, And Characterization
———– SESSIONSession 3C: Mobile Security ———– ———– Authors, Creators & Presenters: Yuqing Yang (The Ohio State University), Yue Zhang...
NDSS 2025 – The Skeleton Keys: A Large Scale Analysis Of Credential Leakage In Mini-Apps
———– SESSIONSession 3C: Mobile Security ———– ———– Authors, Creators & Presenters: Yizhe Shi (Fudan University), Zhemin Yang (Fudan University),...
4 U.S. Citizens, Ukrainian Plead Guilty in N. Korea IT Worker Scheme
There’s been extensive changes in cybersecurity policy in the shift from the Biden to Trump Administration, but one area...
NDSS 2025 – EvoCrawl: Exploring Web Application Code And State Using Evolutionary Search
SESSIONSession 3C: Mobile Security ———– ———– Authors, Creators & Presenters: Xiangyu Guo (University of Toronto), Akshay Kawlay (University of...
Microsoft Fends Off Massive DDoS Attack by Aisuru Botnet Operators
Microsoft late last month was the victim of a massive distributed denial-of-service (DDoS) attack by threat actors using the...
NDSS 2025 – Detecting IMSI-Catchers By Characterizing Identity Exposing Messages In Cellular Traffic
SESSIONSession 3B: Wireless, Cellular & Satellite Security ———– ———– Authors, Creators & Presenters: Jiska Classen (Hasso Plattner Institute, University...
![Sectigo New Public Roots and Issuing CAs Hierarchy [2025 Migration Guide]](https://certera.com/blog/wp-content/plugins/wp-postratings/images/stars/rating_on.gif)