Collaborate Disseminate
A misconfigured database belonging to a pet insurance company, “Rainwalk Pet Insurance,” exposed sensitive PII and veterinary claim data. The data exposure reveals new fraud tactics, including microchip and reimbursement scams. Continue reading Rainwalk Pet Insurance Exposes 158 GB of US Customer and Pet Data
A Zimperium zLabs analysis of 800 free Android and iOS VPN apps exposes critical security flaws, including the Heartbleed bug, excessive system permissions, and non-transparent data practices. Learn how these ‘privacy’ tools are actually major security… Continue reading New Study Warns Several Free iOS and Android VPN Apps Leak Data
Bitsight warns ICS/OT exposure jumped 12% in 2024, leaving 180,000+ critical infrastructure systems open to attack. Learn about the possible vulnerabilities and new malware strains. Continue reading Global Exposure of 180,000 ICS/OT Devices Raises Safety Concerns
A ‘high-volume’ extortion campaign possibly linked to FIN11 and Cl0p is targeting Oracle E-Business executives. Mandiant and GTIG are investigating unproven data theft claims. Continue reading Cl0p-Linked Gang Attempts to Extort Oracle E-Business Customers
Four critical zero-day flaws found in the $20 YoLink Smart Hub allow remote physical access, threatening your home security. See the urgent steps you must take now. Continue reading $20 YoLink IoT Gateway Vulnerabilities Put Home Security at Risk
Cybersecurity firm Tenable found three critical flaws allowing prompt injection and data exfiltration from Google’s Gemini AI. Learn why AI assistants are the new weak link. Continue reading Google Patches “Gemini Trifecta” Vulnerabilities in Gemini AI Suite
Cybersecurity firm Blackpoint Cyber reveals a new spear phishing campaign targeting executives. Learn how attackers use fraudulent document ZIPs containing malicious shortcut files, leveraging ‘living off the land’ tactics, and a unique Anti-Virus chec… Continue reading Malicious ZIP Files Use Windows Shortcuts to Drop Malware
WestJet confirms a data breach starting June 13, 2025, stole passport/ID and personal data. Credit cards and passwords are safe. The airline offers 24 months of free identity monitoring, including $1M insurance. Continue reading WestJet Confirms Passenger IDs and Passports Stolen in Cyberattack
Cybersecurity researchers at Varonis have discovered two new plug-and-play cybercrime toolkits, MatrixPDF and SpamGPT. Learn how these AI-powered tools make mass phishing and PDF malware accessible to anyone, redefining online security risks. Continue reading Meet SpamGPT and MatrixPDF, AI Toolkits Driving Malware Attacks
Infoblox reveals how the Detour Dog group used server-side DNS to compromise 30,000+ sites across 89 countries, installing the stealthy Strela Stealer malware. Continue reading Detour Dog’s DNS Hijacking Infects 30,000 Websites with Strela Stealer