Greece Introduces New Rules To Limit Social Media Access For Minors
Greece approves legislation restricting social media use for children under 15, with new measures focused on online safety, privacy and age verification.
LiteLLM Supply Chain Incident Prompts Security Review After Malicious Package Release
LiteLLM has disclosed a compromised package release involving credential theft capabilities, prompting users to remove affected versions and rotate exposed credentials.
Malaysia Restricts Waze Use Across Government Agencies Over Data Security Concerns
Malaysia has directed civil servants to stop using Waze, citing data security concerns and recommending the locally developed TuJu navigation app as an alternative.
AI Identifies Critical PHP Vulnerabilities Prompt Emergency Website Security Updates
Critical PHP vulnerabilities uncovered with AI have prompted governments and organizations worldwide to take websites offline and apply urgent security updates as exploitation attempts emerge.
Proofpoint Explains How Generative AI Is Changing Email Threat Detection Strategies
Proofpoint reports that generative AI is reducing traditional behavioral signals in malicious emails by enabling more personalized phishing campaigns and pushing security teams toward intent based detection.
Bronze Sandcastle Threat Cluster Targets Organizations With DLL Sideloading Attacks
Cybersecurity researchers have identified Bronze Sandcastle, a China aligned threat cluster using Sandboxie DLL sideloading techniques to deploy encrypted backdoors targeting organizations across Asia and Africa.
Citizen Lab Reveals Spyware Campaign Using Online Advertising Infrastructure
Citizen Lab researchers uncover an alleged spyware campaign targeting Al Jazeera devices through online advertisements linked to advanced surveillance tools.
ConnectWise Cloud Backup Credential Misuse Exposes Microsoft 365 Customers
Security researchers reveal a campaign abusing a compromised ConnectWise Cloud Backup credential to access 173 Microsoft 365 tenants and customer data.
AOMEI Backupper Supply Chain Attack Used Short Update Tampering Windows
Security researchers reveal an AOMEI Backupper supply chain compromise where attackers altered update files briefly to deliver backdoors and remote access tools.
UAT-11985 Uses Fake Event Invitations To Steal Google Account Access
Cisco Talos details a phishing campaign by UAT-11985 targeting Taiwan research affiliates through fake event invites, QR codes, and Google AitM credential theft techniques.
