-
ReliaQuest has responded to claims of a data breach after ShinyHunters posted screenshots that appeared to show the cybersecurity firm’s Okta identity dashboard. The company confirmed that a social engineering attack on August 22 briefly gave a threat actor access to one employee’s identity dashboard session. However, ReliaQuest said its systems, applications and customer data…
-
The ToxicPanda Android malware has gained new ways to interfere with security features, steal banking data and retain control of infected phones. Researchers say the updated threat blocks Google Play traffic through a local VPN interface before installing its main payload. ToxicPanda uses VPN access to block Google services Researchers at Zimperium found that ToxicPanda…
-
Android SafetyCore has drawn renewed attention after users reported that the system component reappeared on their devices following updates. Google says the service supports on-device sensitive-content warnings, but a new developer API has raised fresh questions about how similar content classification could be used by other apps. What Android SafetyCore does Android SafetyCore provides shared…
-
A developer has found that the AliExpress homepage can silently run audio-processing code to help build a detailed device fingerprint. The reported AliExpress audio tracking method does not record conversations, but it may collect device-specific signals without clear notice to users. Hidden audio processing affected Bluetooth headphones The developer, known as laserphile, noticed a strange…
-
LinkedIn’s new “seems like AI” feedback button has been used more than one million times in its first two weeks. The tool lets users flag posts they believe are low-quality, automated or AI-generated. LinkedIn AI slop reports pass one million LinkedIn Chief Product Officer Hari Srinivasan said more than one million people have clicked the…
-
Nonprofit organisations have reported losing access to OneDrive files after Microsoft ended some free Microsoft 365 and Office 365 grant licences. This OneDrive data loss has reportedly left some groups without important records and the tools they need for daily work. Grant changes leave nonprofits without files Microsoft retired free grants for Microsoft 365 Business…
-
Australia’s online safety regulator has secured a binding commitment from Roblox to introduce stronger safeguards for children. The measures address concerns that adults could contact young users and view parts of their profiles without parental consent. Regulator finds gaps in Roblox child safety Australia’s eSafety Commissioner said testing earlier this year identified continuing risks for…
-
Apollo Global Management has confirmed a cyberattack that exposed sensitive personal information, including Social Security numbers. The Apollo data breach involved unauthorised access to some of the investment giant’s cloud platforms in July. Attackers accessed Apollo cloud platforms Apollo said a social-engineering attack gave intruders access to certain cloud systems between July 6 and July…
-
Researchers have uncovered car head unit malware that infects Android-based infotainment systems through a legitimate device-update app. The campaign appears designed to turn compromised systems into proxy botnet nodes and support advertising fraud. Kaspersky attributed the activity to the MoYu group, which researchers have previously linked to the BadBox malware botnet. The company described it…
-
A newly identified threat called SynkLoader malware is spreading through Microsoft Teams phishing campaigns. Attackers impersonate corporate IT help desks and try to convince employees to install a fake software tool. Researchers at Expel said the campaign directs victims to a malicious MSI installer presented as a “PowerShell Cleaner.” The file is hosted in Microsoft…