Category Archives: Security & Privacy
Clop Ransomware Targets PTC Windchill and FlexPLM in Mass Data Theft Campaign
The Clop ransomware group is actively exploiting a critical vulnerability in PTC Windchill and FlexPLM to launch a massive enterprise data theft campaign. Continue reading
Tor Project Pauses Feature Development for Privacy Audit on Firefox ESR
The Tor Project has temporarily frozen feature development for Tor Browser 16 to conduct a rigorous privacy audit on upstream Firefox ESR changes. Continue reading
Laundry Bear Zero-Click Zimbra Phishing Campaign Warned by CISA
A joint cybersecurity advisory highlights the Laundry Bear zero-click Zimbra phishing campaign targeting Western infrastructure using CVE-2025-66376. Continue reading
Laundry Bear APT Exploits Zimbra Zero-Day to Steal Passwords and 2FA Codes
A joint cybersecurity advisory warns that the Russian APT Laundry Bear is exploiting a Zimbra zero-day vulnerability to steal saved passwords and 2FA recovery codes. Continue reading
Selfie Video Verification Launched by Google for Passwordless Account Recovery
Google has introduced selfie video verification as a new passwordless account recovery tool, allowing users to securely regain access using AI liveness checks. Continue reading
ePrivacy Derogation Extended by EU While Protecting End-to-End Encryption
The EU has approved an ePrivacy derogation allowing voluntary CSAM scanning on unencrypted platforms while explicitly exempting end-to-end encrypted messaging services. Continue reading
CVE-2026-16232: Check Point SmartConsole Zero-Day Flaw Actively Exploited
Discover how the critical CVE-2026-16232 zero-day vulnerability in Check Point SmartConsole is actively exploited to hijack firewall management systems. Continue reading
Kratos Phishing Kit Dismantled by International Law Enforcement
Global law enforcement has taken down the Kratos phishing kit infrastructure, a sophisticated platform designed to bypass 2FA protocols using adversary-in-the-middle attacks. Continue reading