Category Archives: Security & Privacy
Phantom Squatting: How AI Hallucinations Enable New Cyberattacks
Discover how Phantom Squatting weaponizes AI-hallucinated domains to launch sophisticated phishing and supply chain attacks, bypassing traditional security measures. Continue reading
California Delete Act: CalMatters and The Markup Launch DROP Audit
CalMatters and The Markup have initiated a public audit of the DROP platform to ensure data broker compliance with the California Delete Act ahead of the August 1 deadline. Continue reading
KDDI Data Breach Exposes 14.2 Million User Accounts Across Japanese ISPs
A massive KDDI data breach has compromised the credentials of 14.2 million users across six Japanese ISPs. Learn about the impact and necessary security steps. Continue reading
Online Safety Commission Launches in Singapore to Combat Digital Harms
Singapore has launched the Online Safety Commission to provide victims of doxxing and harassment with direct, legally backed relief and faster content removal. Continue reading
Tor Browser Update 15.0.17 Released: Critical Security Patches
The Tor Project has released the Tor Browser update 15.0.17 to address critical security vulnerabilities and improve network stability for all users. Continue reading
Signal Backup Security Warning: FBI Alerts Users to Phishing Campaign
The FBI and CISA have issued an urgent warning regarding a Russian phishing campaign targeting Signal backup security, specifically aiming to steal private recovery keys. Continue reading
Salesforce MFA Mandate: Password Managers with Passkeys Now Supported
Salesforce officially confirms that FIDO2-compliant password managers using passkeys satisfy the Salesforce MFA mandate for privileged users. Continue reading
TonRAT Malware: New Hospitality Phishing Campaign Uses Authentication Laundering
Discover how the stealthy TonRAT malware targets hospitality staff using sophisticated authentication laundering and malicious Node.js payloads to bypass security filters. Continue reading
Mistic Backdoor RAT: New Threat Linked to KongTuke Access Broker
Discover how the stealthy Mistic backdoor, utilized by the KongTuke access broker, uses ClickFix social engineering and memory-only execution to infiltrate global organizations. Continue reading