“There are limitations to what we can see with this data, but what we have so far is accurate,” says Heintz. “If anything I think it’s undercounting the scale of the problem.” The data the researchers obtained is only a… Read More "493 Cases of Sextortion Against Children Linked to Notorious Scam Compounds"
Aug 19, 2025Ravie LakshmananVulnerability / Cyber Espionage A new exploit combining two critical, now-patched security flaws in SAP NetWeaver has emerged in the wild, putting organizations at risk of system compromise and data theft. The exploit in question chains together… Read More "Public Exploit for Chained SAP Flaws Exposes Unpatched Systems to Remote Code Execution"
“The rise in social engineering attacks by malicious actors should alarm any organization’s security team,” said Thomas Richards, Infrastructure Security Practice Director at Black Duck. “This also demonstrates that the attackers are out of other options and are resorting to… Read More "ShinyHunters strike again: Workday breach tied to Salesforce-targeted social engineering wave"
A popular Google-featured browser extension offering a virtual private network (VPN) service recently turned malicious and is now spying on users’ every move online. Researchers from Koi Security detected that FreeVPN.One, a VPN extension with over 100,000 installs on the… Read More "Legitimate Chrome VPN Extension Turns to Browser Spyware"
Researchers have discovered a critical security vulnerability in Next.js that allows attackers to easily bypass middleware authorization measures. The vulnerability, designated CVE-2025-29927, was discovered by Rachid Allam and Yasser Allam and since assigned a base CVSS score of 9.1. By… Read More "Critical Middleware Vulnerability in Next.js (CVE-2025-29927)"
Aug 19, 2025Ravie LakshmananEncryption / Cloud Security The U.K. government has apparently abandoned its plans to force Apple to weaken encryption protections and include a backdoor that would have enabled access to the protected data of U.S. citizens. U.S. Director… Read More "U.K. Government Drops Apple Encryption Backdoor Order After U.S. Civil Liberties Pushback"
Nach einem Ransomware-Angriff werden CISOs oft dafür verantwortlich gemacht und gekündigt. MAYA LAB – shutterstock.com Laut einem aktuellen Bericht von Sophos haben CISOs eine Chance von eins zu vier, dass ihr Arbeitsplatz einen erfolgreichen Ransomware-Angriff nicht übersteht. Die Ergebnisse des… Read More "Ein Viertel der CISOs wird nach Ransomware-Angriff entlassen"
Australia’s second-largest internet service provider (ISP) has revealed a major data breach impacting hundreds of thousands of customers. Parent company TPG Telecom notified the Australian Securities Exchange of the incident today. It said an “unknown third party” managed to gain… Read More "Australian ISP iiNet Suffers Breach of 280,000+ Records"
The explosion of AI has led to the creation of tools that make it more accessible, leading to more adoption and more numerous, less sophisticated users. As with cloud computing, that pattern of growth leads to misconfigurations and, ultimately, leaks.… Read More "Using Exposed Ollama APIs to Find DeepSeek Models"
3. Your internal team spends more time firefighting than fortifying Organizations typically realize they need an MSSP when their internal team struggles to keep pace with alerts, incident response, or compliance requirements, says Ensar Seker, CISO at SOCRadar, where he… Read More "7 signs it’s time for a managed security service provider"
