![[tl;dr sec] #277 - Cybersecurity (Anti)Patterns, $64K from Deleted Files, New from Meta AI Security](https://image.cybernoz.com/wp-content/uploads/2025/05/tldr-sec-277-Cybersecurity-AntiPatterns-64K-from-Deleted-Files.png)
[tl;dr sec] #277 – Cybersecurity (Anti)Patterns, $64K from Deleted Files, New from Meta AI Security
How to avoid Busywork Generators, bug bounty story of secrets in deleted files, new AI security tools and evals from Meta I hope you’ve been…
Month: May 2025
Researchers Find Way to Bypass Phishing-Resistant MFA in Microsoft Entra ID
Cybersecurity researchers have uncovered a sophisticated technique to bypass Microsoft’s phishing-resistant multi-factor authentication (MFA) by exploiting the device code authentication flow and Primary Refresh Tokens…
Think Twice Before Creating That ChatGPT Action Figure
At the start of April, an influx of action figure started appearing on social media sites including LinkedIn and X. Each figure depicted the person…
Crypto Agility: Preparing for the Post-Quantum Shift
Many enterprises believe their encryption is secure—until a new threat proves otherwise. Quantum computing and evolving cryptographic risks are forcing security teams to rethink their…
Photos: RSAC 2025, part 2
RSAC 2025 Conference is taking place at the Moscone Center in San Francisco. Help Net Security is on-site, and this gallery takes you inside the…
Cybercriminals Deceive Tenants into Redirecting Rent Payments to Fraudulent Accounts
In a sophisticated business email compromise (BEC) scheme, cybercriminals are targeting tenants with fraudulent requests to redirect rent payments to attacker-controlled bank accounts. The campaign…
DORA compliance – Why financial firms can’t afford to fall behind
The financial sector is under increasing pressure to strengthen its defences against cyber threats. With digital transformation accelerating, financial institutions are more exposed than ever…
What privacy? Perplexity wants your data, builds browser to track you and serve ads
AI search service Perplexity AI doesn’t just want you using its app—it wants to take over your web browsing experience too. The company is planning…
New WordPress Malware as Anti-Malware Plugin Take Full Control of Website
A sophisticated malware variant masquerading as a legitimate WordPress security plugin has been identified, capable of providing attackers with persistent access to compromised websites. The…
Quantum Computing and Cybersecurity – What CISOs Need to Know Now
As quantum computing transitions from theoretical research to practical application, Chief Information Security Officers (CISOs) face an unprecedented challenge to cryptographic security. The emergence of…
Why telecoms need a proactive AI defense
Telecommunications are the lifeblood of the modern world, connecting billions of people and devices. This makes them a prime target for sophisticated cyberattacks, according to Nokia.…
Apple AirPlay SDK devices at risk of takeover—make sure you update
Researchers found a set of vulnerabilities in Apple’s AirPlay SDK that put billions of users at risk of their devices being taking over. AirPlay is…