Collaborate Disseminate
Hackers are using fake Microsoft Teams installers found in search results and ads to deploy the Oyster backdoor. Learn how to protect your PC from this remote-access threat. Continue reading Fake Teams Installers Dropping Oyster Backdoor (aka Broomstick)
Met Police arrested two teenagers over the Kido nursery ransomware attack, which exposed data for 8,000 children. Full details on the hack and police investigation. Continue reading UK Police Arrest Two Teens Over Kido Nursery Ransomware Attack
Latest reports suggest the critical GoAnywhere MFT vulnerability (CVE-2025-10035, CVSS 10.0) is actively exploited by the Medusa ransomware gang for unauthenticated RCE. Patch immediately. Continue reading Medusa Ransomware Exploiting GoAnywhere MFT Flaw, Confirms Microsoft
Security researchers at UC Irvine reveal the ‘Mic-E-Mouse’ attack, showing how high-DPI optical sensors in modern mice can detect desk vibrations and reconstruct user speech with high accuracy. Learn how this side-channel vulnerability affects your pri… Continue reading New Mic-E-Mouse Attack Shows Computer Mice Can Capture Conversations
A misconfigured database belonging to a pet insurance company, “Rainwalk Pet Insurance,” exposed sensitive PII and veterinary claim data. The data exposure reveals new fraud tactics, including microchip and reimbursement scams. Continue reading Rainwalk Pet Insurance Exposes 158 GB of US Customer and Pet Data
A Zimperium zLabs analysis of 800 free Android and iOS VPN apps exposes critical security flaws, including the Heartbleed bug, excessive system permissions, and non-transparent data practices. Learn how these ‘privacy’ tools are actually major security… Continue reading New Study Warns Several Free iOS and Android VPN Apps Leak Data
Bitsight warns ICS/OT exposure jumped 12% in 2024, leaving 180,000+ critical infrastructure systems open to attack. Learn about the possible vulnerabilities and new malware strains. Continue reading Global Exposure of 180,000 ICS/OT Devices Raises Safety Concerns
A ‘high-volume’ extortion campaign possibly linked to FIN11 and Cl0p is targeting Oracle E-Business executives. Mandiant and GTIG are investigating unproven data theft claims. Continue reading Cl0p-Linked Gang Attempts to Extort Oracle E-Business Customers
Four critical zero-day flaws found in the $20 YoLink Smart Hub allow remote physical access, threatening your home security. See the urgent steps you must take now. Continue reading $20 YoLink IoT Gateway Vulnerabilities Put Home Security at Risk
Cybersecurity firm Tenable found three critical flaws allowing prompt injection and data exfiltration from Google’s Gemini AI. Learn why AI assistants are the new weak link. Continue reading Google Patches “Gemini Trifecta” Vulnerabilities in Gemini AI Suite