New Malware Exploits TASPEN Legacy Systems to Target Indonesian Elderly
27
Aug
2025

New Malware Exploits TASPEN Legacy Systems to Target Indonesian Elderly

Threat actors are leveraging the trusted brand of Indonesia’s state pension fund, PT Dana Tabungan dan Asuransi Pegawai Negeri (Persero),…

27
Aug
2025

300k+ Plex Media Server instances still vulnerable to attack via CVE-2025-34158

Over 300,000 internet-facing Plex Media Server instances are still vulnerable to attack via CVE-2025-34158, a critical vulnerability for which Plex…

Ireland sets out chip plan
27
Aug
2025

Intel filing shows risks of US government stake

While the CEOs of the major tech firms have lined up to support the Trump administration’s 9.9% equity stake in…

27
Aug
2025

Fixing Opencode Transparency in Ghostty Terminal

How to make Opencode respect your terminal’s transparent background July 18, 2025 Opencode running with transparent background in Ghostty (click…

Spotify Launches Direct Messaging Feature Amid Security Concerns
27
Aug
2025

Spotify Launches Direct Messaging Feature Amid Security Concerns

Spotify this week unveiled a new Direct Messaging feature, enabling users to share songs, podcasts and audiobooks within the app. While the…

Blind Eagle's Five Clusters Target Colombia Using RATs, Phishing Lures, and Dynamic DNS Infra
27
Aug
2025

Blind Eagle’s Five Clusters Target Colombia Using RATs, Phishing Lures, and Dynamic DNS Infra

Cybersecurity researchers have discovered five distinct activity clusters linked to a persistent threat actor known as Blind Eagle between May…

27
Aug
2025

One-click MCP servers with Cloudflare

Cloudflare simplifying MCP deployment (click for full size) One thing I’ve never liked about the whole MCP thing is the…

New ZipLine Campaign Attacks Critical Manufacturing Companies to Deploy In-memory Malware MixShell
27
Aug
2025

New ZipLine Campaign Attacks Critical Manufacturing Companies to Deploy In-memory Malware MixShell

In recent weeks, a sophisticated phishing operation known as the ZipLine campaign has targeted U.S.-based manufacturing firms, leveraging supply-chain criticality…

CISA Issues New ICS Advisories on Critical Vulnerabilities and Exploits
27
Aug
2025

CISA Issues New ICS Advisories on Critical Vulnerabilities and Exploits

The Cybersecurity and Infrastructure Security Agency (CISA) released three Industrial Control Systems (ICS) advisories on August 26, 2025, detailing nine…

Salesloft OAuth Breach via Drift AI Chat Agent Exposes Salesforce Customer Data
27
Aug
2025

Salesloft OAuth Breach via Drift AI Chat Agent Exposes Salesforce Customer Data

Aug 27, 2025Ravie LakshmananCloud Security / Threat Intelligence A widespread data theft campaign has allowed hackers to breach sales automation…

ESET warns of PromptLock, the first AI-driven ransomware
27
Aug
2025

ESET warns of PromptLock, the first AI-driven ransomware

ESET warns of PromptLock, the first AI-driven ransomware Pierluigi Paganini August 27, 2025 ESET found PromptLock, the first AI-driven ransomware,…

27
Aug
2025

Most AI Interaction Will Go Through Your DA

The stages of technological evolution (click for full size) A long time ago, I wrote about how things tend to…