Surge in coordinated scans targets Microsoft RDP auth servers
Internet intelligence firm GreyNoise reports that it has recorded a significant spike in scanning activity consisting of nearly 1,971 IP addresses probing Microsoft Remote Desktop Web…
Month: August 2025
Telstra Health to lead My Health Record data architecture overhaul
Telstra’s digital health arm has won a $33.2 million contract to implement a new data architecture for the government’s My Health Record based on a…
Docker fixes critical Desktop flaw allowing container escapes
Docker fixes critical Desktop flaw allowing container escapes Pierluigi Paganini August 25, 2025 Docker fixed a critical flaw in the Docker Desktop app for Windows…
xAI sues Apple and OpenAI
Elon Musk’s artificial intelligence startup xAI has sued Apple and ChatGPT maker OpenAI in US federal court in Texas, accusing them of illegally conspiring to…
New AI attack hides data-theft prompts in downscaled images
Researchers have developed a novel attack that steals user data by injecting malicious prompts in images processed by AI systems before delivering them to a…
Verint bought by Thoma Bravo in US$2 billion deal
Thoma Bravo will acquire Verint Systems in a US$2 billion ($3.1 billion) deal, including debt, the customer engagement platform said, marking the latest software buyout…
Qantas makes architectural changes to its API management platform
Qantas has made a series of architectural changes to its API management platform, improving its reliability and resiliency, which has encouraged usage. Speaking at WSO2Con…
MCPs are just other people’s prompts and other people’s APIs
The Simple Truth About MCPs I’ve been thinking about Model Context Protocols (MCPs) for months, and here’s the simplest way to explain what they actually…
0-Click Zendesk Account Takeover Vulnerability Enables Access to all Zendesk Tickets
A critical security vulnerability has been discovered in Zendesk’s Android SDK implementation that allows attackers to perform mass account takeovers without any user interaction. The…
Beware! Google Ads Promote Fake Tesla Websites Soliciting Fraudulent Deposits
Scammers are using Google Ads to pose as Tesla in an elaborate cybercrime campaign that aims to obtain illicit preorders for the company’s unreleased Optimus…
Attackers weaponise Linux file names as malware vectors
A researcher at security vendor Trellix has uncovered a Linux malware attack that embeds malicious code directly into file names, a technique that bypasses most…
Auchan retailer data breach impacts hundreds of thousands of customers
French retailer Auchan is informing that some sensitive data associated with loyalty accounts of several hundred thousand of its customers was exposed in a cyberattack.…