Chinese Hackers Breach U.S. Firms as Trade Tensions Rise
A Coordinated Breach Comes to Light CNN reported that Chinese state-linked hackers infiltrated several U.S. legal and technology firms in...
that
Internal Security Assessor (ISA) Training Case Study: WestJet
WestJet has always worked to maintain PCI compliance across a complex environment that spans over 20 payment channels and 40...
Two Critical Flaws Uncovered in Wondershare RepairIt Exposing User Data and AI Models
Cybersecurity researchers have disclosed two security flaws in Wondershare RepairIt that exposed private user data and potentially exposed the system...
Iranian-Backed Hackers Turn Their Fake Job Recruitment Scams on Europe
An Iranian threat group that typically has targeted organizations in the Middle East, including Israel and the United Arab Emirates,...
US Disrupts Massive Cell Phone Array in New York
This is a weird story: The US Secret Service disrupted a network of telecommunications devices that could have shut...
Why SASE Vendors Are Finally Admitting the Need for Browser Security Solutions
In early September, Palo Alto Networks publicly acknowledged that Secure Web Gateways (SWGs) are architecturally unable to defend against...
Google’s $425 Million Fine a Win for Privacy, But Will it Stick?
In a clear win for privacy, a federal jury earlier this month decided that Google must pay $425 million...
Hackers Exploit Pandoc CVE-2025-51591 to Target AWS IMDS and Steal EC2 IAM Credentials
Cloud security company Wiz has revealed that it uncovered in-the-wild exploitation of a security flaw in a Linux utility called...
$150K awarded for L1TF Reloaded exploit that bypasses cloud mitigations
$150K awarded for L1TF Reloaded exploit that bypasses cloud mitigations Pierluigi Paganini September 23, 2025 Researchers earned $150K for “L1TF...
ShadowV2 Botnet Exploits Misconfigured AWS Docker Containers for DDoS-for-Hire Service
Cybersecurity researchers have disclosed details of a new botnet that customers can rent access to conduct distributed denial-of-service (DDoS) attacks...
GitHub Mandates 2FA and Short-Lived Tokens to Strengthen npm Supply Chain Security
Sep 23, 2025Ravie LakshmananSupply Chain Attack / Malware GitHub on Monday announced that it will be changing its authentication and...
Back to School Means Back to Breaches
Parents typically have a checklist that includes at least a few security items (Is there a campus shuttle for...
European Airport Disruptions Caused by Ransomware: EU Cyber Office
The widespread disruptions at airports across Europe that started over the weekend and spilled into Monday was the result...
Technical Analysis of Zloader Updates
IntroductionZloader (a.k.a. Terdot, DELoader, or Silent Night) is a Zeus-based modular trojan that emerged in 2015. Zloader was originally...
New Wave of Self-Replicating NPM Malware Exposes Critical Gaps in Software Supply Chain Security
Being the Dune groupie that I am, I couldn’t pass up the chance to comment on the so-called “Shai-Hulud”...
