Collaborate Disseminate
The New Reality for Lean Security Teams
If you’re the first security or IT hire at a fast-growing startup, you’ve likely inherited a mandate that’s both simple and maddeningly complex: secure the business without slowing it down.
Most organizations usi… Continue reading Is Your Google Workspace as Secure as You Think it is?
The zero-day exploitation of a now-patched security flaw in Google Chrome led to the distribution of an espionage-related tool from Italian information technology and services provider Memento Labs, according to new findings from Kaspersky.
The vulnera… Continue reading Chrome Zero-Day Exploited to Deliver Italian Memento Labs’ LeetAgent Spyware
A European embassy located in the Indian capital of New Delhi, as well as multiple organizations in Sri Lanka, Pakistan, and Bangladesh, have emerged as the target of a new campaign orchestrated by a threat actor known as SideWinder in September 2025.
… Continue reading SideWinder Adopts New ClickOnce-Based Attack Chain Targeting South Asian Diplomats
Social media platform X is urging users who have enrolled for two-factor authentication (2FA) using passkeys and hardware security keys like Yubikeys to re-enroll their key to ensure continued access to the service.
To that end, users are being asked t… Continue reading X Warns Users With Security Keys to Re-Enroll Before November 10 to Avoid Lockouts
Cybersecurity researchers have discovered a new vulnerability in OpenAI’s ChatGPT Atlas web browser that could allow malicious actors to inject nefarious instructions into the artificial intelligence (AI)-powered assistant’s memory and run arbitrary co… Continue reading New ChatGPT Atlas Browser Exploit Lets Attackers Plant Persistent Hidden Commands
Security, trust, and stability — once the pillars of our digital world — are now the tools attackers turn against us. From stolen accounts to fake job offers, cybercriminals keep finding new ways to exploit both system flaws and human behavior.
Each ne… Continue reading ⚡ Weekly Recap: WSUS Exploited, LockBit 5.0 Returns, Telegram Backdoor, F5 Breach Widens
The ransomware group known as Qilin (aka Agenda, Gold Feather, and Water Galura) has claimed more than 40 victims every month since the start of 2025, barring January, with the number of postings on its data leak site touching a high of 100 cases in Ju… Continue reading Qilin Ransomware Combines Linux Payload With BYOVD Exploit in Hybrid Attack
The newly released OpenAI Atlas web browser has been found to be susceptible to a prompt injection attack where its omnibox can be jailbroken by disguising a malicious prompt as a seemingly harmless URL to visit.
“The omnibox (combined address/search b… Continue reading ChatGPT Atlas Browser Can Be Tricked by Fake URLs into Executing Hidden Commands
The threat actors behind a large-scale, ongoing smishing campaign have been attributed to more than 194,000 malicious domains since January 1, 2024, targeting a broad range of services across the world, according to new findings from Palo Alto Networks… Continue reading Smishing Triad Linked to 194,000 Malicious Domains in Global Phishing Operation
Microsoft on Thursday released out-of-band security updates to patch a critical-severity Windows Server Update Service (WSUS) vulnerability with a proof-of-concept (Poc) exploit publicly available and has come under active exploitation in the wild.
The… Continue reading Microsoft Issues Emergency Patch for Actively Exploited Critical WSUS Vulnerability