Collaborate Disseminate
15-year-old strongSwan flaw allows attackers to crash VPNs via integer underflow bug, affecting EAP-TTLS plugin and multiple versions worldwide. Continue reading 15-Year-Old strongSwan Flaw Lets Attackers Crash VPNs via Integer Underflow
Telnyx issues an urgent alert after hackers TeamPCP uploaded malicious versions (4.87.1 & 4.87.2) of its Python SDK to steal cloud and crypto credentials. Continue reading TeamPCP Uses Fake Ringtone File in Tainted Telnyx SDK to Steal Credentials
Lloyds Banking Group to compensate 450,000 customers after app glitch exposed data. Find out how the glitch affected… Continue reading Lloyds Group to Compensate 450,000 Customers After App Glitch
Google fast-tracks post-quantum cryptography with a 2029 deadline as researchers warn quantum computers could break current encryption sooner than expected. Continue reading Google Sets 2029 Deadline as Quantum Computers Threaten Encryption
Researchers at WatchGuard have identified a new phishing campaign targeting companies in Venezuela. Using malicious SVG image files… Continue reading BianLian Ransomware Spreads via Fake Invoice SVG Images in New Attacks
ReversingLabs researchers identify a new Ghost campaign using fake npm install logs and progress bars to phish for sudo passwords and steal crypto wallets from developers. Continue reading New Ghost Campaign Uses Fake npm Progress Bars to Phish Sudo Passwords
7AI research reveals a massive QR code phishing attack that evaded SPF, DKIM, and DMARC. Find out how 1.6 million emails went undetected. Continue reading Quish Splash QR Code Phishing Campaign Hits 1.6 Million Users
CyberProof researchers have detected a 10% surge in PXA Stealer attacks targeting financial institutions in Q1 2026. Learn… Continue reading New PXA Stealer Malware Targets Banks, Uses Telegram to Exfiltrate Data
This practitioner-focused review covers Acalvio ShadowPlex, a deception-first platform designed to stop attacker progress across IT, cloud, OT,… Continue reading Acalvio ShadowPlex Review: Deception-Based Preemptive Cybersecurity
Sonatype uncovers a sophisticated malware campaign using hijacked npm developer accounts to steal API keys and passwords. Is your dev environment at risk? Continue reading Suspected Hijacked Developer Accounts Spread npm Malware