Fake Internal Emails Dominate Phishing Simulation Clicks
KnowBe4 has released its Q2 2025 Simulated Phishing Roundup report. The roundup highlights a continued trend of employee susceptibility to social engineering techniques that exploit…
Month: July 2025
Citrix Bleed 2 exploited weeks before PoCs as Citrix denied attacks
A critical Citrix NetScaler vulnerability, tracked as CVE-2025-5777 and dubbed “CitrixBleed 2,” was actively exploited nearly two weeks before proof-of-concept (PoC) exploits were made public,…
Microsoft Teams voice calls abused to push Matanbuchus malware
The Matanbuchus malware loader has been seen being distributed through social engineering over Microsoft Teams calls impersonating IT helpdesk. Matanbuchus is a malware-as-a-service operation seen promoted…
New TeleMessage SGNL Flaw Is Actively Being Exploited by Attackers
TeleMessage SGNL, a made-in-Israel clone of the Signal app used by US government agencies and regulated businesses, has been found running with an outdated configuration…
Cloudflare makes changes to avoid repeat of 1.1.1.1 DNS outage
Internet infrastructure provider Cloudflare is making changes to avoid a repeat of a service outage that took down its popular 1.1.1.1 domain name system (DNS)…
United Natural Foods loses up to $400M in sales after cyberattack
United Natural Foods said the cyberattack that prompted the food distributor and wholesaler to completely shut down its network last month resulted in lost sales…
VMware fixes four ESXi zero-day bugs exploited at Pwn2Own Berlin
VMware fixed four vulnerabilities in VMware ESXi, Workstation, Fusion, and Tools that were exploited as zero-days during the Pwn2Own Berlin 2025 hacking contest in May…
Qantas obtains court order to prevent third-party access to stolen data
Qantas Airways has obtained an interim injunction in the NSW Supreme Court to prevent the stolen data from being accessed or published by anyone, including…
Defence’s chief IT architect moves on
Defence’s chief IT architect has departed to lead technology and cyber operations at the Department of Infrastructure, Transport, Regional Development, Communications, Sports and the Arts.…
State Department cyber diplomacy firings and changes threaten U.S. defenses
Listen to the article 8 min This audio is auto-generated. Please let us know if you have feedback. The U.S. State Department fired diplomats and…
Google sues to disrupt BadBox 2.0 botnet infecting 10 million devices
Google has filed a lawsuit against the anonymous operators of the Android BadBox 2.0 malware botnet, accusing them of running a global ad fraud scheme…
Ukraine Hackers Claimed Cyberattack on Major Russian Drone Supplier
Last week, Ukraine’s Main Intelligence Directorate (GUR) orchestrated a sophisticated cyberattack against Gaskar Integration, a leading Russian drone manufacturer. The operation began with reconnaissance of…