Category: Cyber Security
-
The release of Signal secure cloud backups marks a major upgrade for the privacy-focused messenger. For the first time, users can back up and restore their chats while keeping conversations fully protected with end-to-end encryption. Backup Options Signal now provides two options for saving messages: Both options maintain Signal’s strict privacy standards, ensuring only the…
-
A sharp Cisco ASA scanning surge has alarmed security researchers. In late August 2025, GreyNoise detected unusual activity targeting Cisco Adaptive Security Appliance (ASA) devices. At the peak, scans from 25,000 unique IPs probed login portals and remote access services. This scale suggests attackers may prepare to exploit a yet-to-be disclosed vulnerability. Attack Details GreyNoise…
-
The GhostAction GitHub supply chain attack has drawn global attention. Researchers revealed that hackers exploited GitHub Actions workflows to steal 3,325 secrets from 817 repositories. The campaign affected 327 developers and compromised critical tokens, highlighting the risks of insecure CI/CD pipelines. How the Attack Worked The attack surfaced in early September 2025 when investigators discovered…
-
The Qantas CEO pays price after cyberattack update highlights how leadership accountability now extends to cybersecurity failures. Following a breach that exposed millions of customer records, Qantas reduced executive bonuses by 15%. The move shows how corporate governance increasingly ties rewards to data security. Details of the Breach In July 2025, Qantas confirmed that hackers…
-
The Nemo Protocol exploit drained millions from a Sui-based DeFi platform. Hackers extracted around $2.4 million in USDC by abusing smart contracts. This event underscores growing weaknesses across decentralized finance. What Happened Late at night, Nemo Protocol confirmed a security incident affecting its Market pool. The team immediately suspended all smart contract activity to investigate.…
-
The VirusTotal SVG malware campaign highlights how cybercriminals exploit image files to launch phishing attacks. Researchers found malicious code embedded in SVG files, a format widely used for web graphics. This discovery shows how attackers adapt to evade traditional security checks. How the Campaign Works SVG files normally store scalable graphics, but they can also…
-
The launch of Spotify DM privacy concerns has triggered backlash among users and security experts. A new direct messaging feature links shared songs with account identities, raising the risk of exposure and potential doxxing. How the Feature Works Spotify generates a unique URL whenever users share songs. Each link contains a tracker, often visible as…
-
The Apitor robot toys case has become a wake-up call for parents and regulators. U.S. authorities found that Apitor, a Chinese manufacturer of educational robot kits, illegally collected children’s precise location data through its mobile app. The practice violated the Children’s Online Privacy Protection Act (COPPA), raising alarms about how connected toys handle sensitive information.…
-
The rise of North Korea fake recruiters highlights how far cybercriminals will go to reach their targets. Between March and June 2025, attackers posing as recruiters or job applicants lured professionals into executing malicious code. The scheme relied on fake “skills tests,” with victims copying and pasting dangerous scripts into their own systems. Slack, along…
-
The Nepal social media ban has disrupted millions of users across the country. In early September 2025, authorities blocked access to platforms like Facebook, X (formerly Twitter), YouTube, Instagram, and LinkedIn. Officials said the companies failed to register with Nepal’s Ministry of Communication and Information Technology, sparking concerns about censorship and digital rights. Why Platforms…