Category: Cyber Security
-
Attackers are now exploiting trusted link wrapping services to steal Microsoft 365 credentials. The threat actors abused features in Proofpoint and Intermedia to mask phishing links. How Attackers Exploited Trusted Links From June through July 2025, attackers compromised email accounts with active link wrapping. They inserted malicious URLs, often shortened first. Then the wrapping service…
-
The Zero Day Initiative will offer a $1 million prize for a WhatsApp zero‑click exploit. This challenge targets full remote code execution without user interaction. Researchers must demonstrate a truly seamless exploit. What’s the Deal Meta and other tech sponsors back Pwn2Own Ireland 2025. It runs from October 21 to 24 in Cork, Ireland. The…
-
Organizations are under threat as Akira ransomware operators intensify attacks on SonicWall firewall SSL VPN services. The attacks began in mid‑July 2025 and accelerated rapidly. Evidence suggests a likely zero‑day vulnerability, though credential-based access remains a possible entry method. Timeline and Scope Attacks spiked around July 15, with multiple companies targeted within hours. Researchers noted…
-
Hackers tried to break into a bank’s system using a device the size of a credit card. They planted a 4G‑enabled Raspberry Pi in the network powering the ATM system. The bank’s internal network became vulnerable, but experts blocked the attempt. How the Attack Unfolded Stealth Tactics Employed Attackers used advanced techniques to hide their tracks:…
-
Microsoft has updated its security rewards program to include larger payouts for .NET-related vulnerabilities. The .NET bug bounty now pays researchers up to $40,000 for critical flaws like remote code execution or privilege escalation. The updated program reflects Microsoft’s growing focus on community-driven security improvements. Microsoft Expands the Program’s Scope The bounty program now covers…
-
Elon Musk’s social media platform X has criticized the UK’s Online Safety Act, calling it a threat to free speech. In a recent statement, the company warned that the law’s wide scope could lead to excessive censorship under the guise of child protection. Age Checks Now Mandatory in the UK As of last Friday, social…
-
Brazil’s antitrust watchdog CADE has launched an investigation into Microsoft following a formal complaint from Norwegian browser company Opera. The case, announced Thursday, centers around allegations of unfair competition involving Microsoft Edge and the tech giant’s AI-powered Jumpstart initiative. Opera Claims Microsoft Shuts Out Rivals Opera filed the complaint on Tuesday, accusing Microsoft of anti-competitive…
-
If you’ve been using Microsoft Authenticator to store your passwords, it’s time to act. On August 1st, Microsoft will permanently delete all saved passwords and payment data from the app—ending its use as a credential vault. The app will continue to support two-factor authentication (2FA) and passkeys. But if you’ve relied on it for autofill…
-
The UK Ministry of Defence is tapping into esports to level up its military’s digital edge. In partnership with the British Esports Federation, the ministry has announced the International Defence Esports Games (IDEG)—a groundbreaking tournament designed to strengthen troops’ cyber skills and modern combat readiness. Scheduled for late 2026, the IDEG will first welcome service…
-
A new investigation has uncovered that companies tied to China’s state-backed hacking group Hafnium have filed over a dozen patents for spyware and surveillance tools. These Hafnium spyware patents expose a deeper, more structured cyber espionage network than previously understood. The findings come from cybersecurity firm SentinelOne, following a 2025 indictment by the U.S. Department…