Cybercriminals and fraudsters have dedicated entire ecosystems to scamming and stealing from Formula 1 fans, a new report has warned. According to the Bitdefender Cybersecurity Grand Prix Fan Threat Index, the growing global digital ecosystem around motorsport makes it an… Read More "Fake Streams, Counterfeit Merch & Scams: How Fraudsters Target F1 Fans"
Hackers have been exploiting a vulnerability in Arista Extensible Operating System (EOS) as a zero-day that will not be patched. Arista EOS is a modular, Linux-based network operating system designed for the vendor’s high-performance switches for data center, cloud, and… Read More "No Patch Planned for Exploited Arista EOS Vulnerability"
Ravie LakshmananJun 10, 2026Vulnerability / JavaScript Cybersecurity researchers have flagged half a dozen vulnerabilities in protobuf.js, a JavaScript and TypeScript implementation of Protocol Buffers (Protobuf), that, if successfully exploited, could result in remote code execution (RCE) and denial-of-service (DoS) attacks.… Read More "Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoS"
Starmer did not go into a lot of detail, preferring to let technology companies craft their own plans, but in this case the details matter. Analysts and consultants said that there has been a push for everything to happen on-device,… Read More "UK move to filter photos and messages triggers encryption worries for CISOs"
ESET researchers analyzed the 2025 activity of Webworm, a China-aligned APT group that started out targeting organizations in Asia, but has recently shifted its focus to Europe. Even though this is our first public blogpost on the group, we have… Read More "Webworm: New burrowing techniques"
A new phishing-as-a-service (PhaaS) platform called Kali365 is being distributed in the wild, primarily via Telegram, the FBI has warned. First detected in April 2026, Kali365 provides cyber threat actors access to AI-generated phishing lures, automated campaign templates real-time targeted… Read More "FBI Warns ‘Kali365’ Phishing Kit Hijacks Microsoft 365 OAuth Tokens"
The survey of thousands of security leaders exposes an underlying naivete about AI-built code and its vulnerabilities, even as tools like Anthropic’s Mythos are uncovering security flaws orders of magnitude faster than any human security team could ever hope to.… Read More "Enterprises know AI-generated code is vulnerable; they’re shipping it anyway"
Watch out for bogus World Cup websites that mimic official ticket and merchandise flows to steal money and personal data 22 May 2026 • , 5 min. read As the FIFA World Cup 2026™ in the United States, Canada, and… Read More "Scams target soccer fans with fake World Cup tickets, merchandise"
A surge in phishing emails lacking subject lines has been identified as part of a widespread campaign targeting high-value users. According to findings detailed by cybersecurity company Cyberproof on April 21, the activity, known as silent subject or null subject phishing, is… Read More "Surge in Silent Subject Phishing Campaigns Targets VIP Users"
There’s one cognitive bias that we humans are prone to, and it lies at the centre of some of the challenges that cybersecurity professionals face every day. It’s known as the normalcy bias – what Dr. Lauren Braithwaite defines as… Read More "the ‘auditors’ you never hired"
