Hackers have launched a large-scale attack on Salesforce environments by abusing stolen access tokens. The breach, linked to the Salesloft Drift integration, highlights the growing risks of third-party apps in enterprise platforms. How the Attack Unfolded Between August 8 and August 18, 2025, a threat group known as UNC6395 used compromised OAuth tokens to access…
A whistleblower has accused the Department of Government Efficiency (DOGE) of compromising the Social Security database by uploading sensitive records to an insecure cloud. The allegations suggest data on over 300 million Americans may be at risk, sparking widespread concern about identity theft, misuse of government data, and national security threats. The Allegations Charles Borges,…
Nevada has suffered a major cyberattack that forced state offices to close and websites to go offline. The incident disrupted services across the state but left emergency systems untouched. Officials confirmed no evidence that personal data was compromised. The Cyberattack The attack was detected on Sunday, August 24, 2025, when Nevada’s IT teams identified a…
Google has announced a major change to Android app distribution. From now on, sideloaded apps will only install if they come from verified developers. The update aims to strengthen user security and combat malware. What Sideloading Means Sideloading lets Android users install apps outside Google Play. Traditionally, this option offered freedom but also exposed devices…
On August 24, Pro-Ukrainian cyber-partisans hijacked Russian TV during Ukraine’s Independence Day. The hackers replaced scheduled programming with raw battlefield footage. For more than three hours, 116 channels broadcast images of war directly into Russian homes. How the Hack Took Place Hackers breached the systems of Russia’s third-largest TV provider. They replaced regular broadcasts with…
Coordinated RDP scans target Microsoft authentication servers in what experts call an alarming campaign. GreyNoise observed nearly 2,000 IPs probing Microsoft Remote Desktop Web Access portals in one day, far above the daily norm. Just days later, the number surged to over 30,000 unique IPs, signaling a serious reconnaissance effort. Timing-Based Enumeration The scans exploit…
A new strain of fake Russian antivirus spyware has been uncovered, designed to infiltrate the devices of business executives. Posing as legitimate security software from Russia’s Federal Security Service (FSB), this Android malware is equipped with powerful surveillance tools that threaten both privacy and corporate security. Android.Backdoor.916.origin Security researchers from Doctor Web identified the spyware…
New research shows that Germany ransomware attacks are surging, with the country now a prime focus for dark web threats. Hackers target Germany’s manufacturing and IT industries, exploiting the nation’s economic strength and heavy reliance on digital infrastructure. Key Findings A report from SOCRadar reveals several alarming trends: Why Germany Is a Prime Target Germany’s…
The French retailer Auchan has confirmed another Auchan Cyberattack, this time targeting customer loyalty accounts. The breach affected hundreds of thousands of shoppers and exposed sensitive personal details, though banking data and PINs remain safe. Details of the Breach Hackers accessed loyalty account information, stealing: The company stressed that passwords, payment details, and loyalty card…
A new Android malware strain has surfaced, disguised as an antivirus tool linked to Russia’s Federal Security Service (FSB). The spyware focuses on Russian executives, giving attackers full access to phones, including the camera, microphone, and private communications. Disguised as Trusted Security Researchers from Dr. Web identified the malware as Android.Backdoor.916.origin. The application presents itself…