UNC6395 targets Salesloft in Drift OAuth token theft campaign
UNC6395 targets Salesloft in Drift OAuth token theft campaign Pierluigi Paganini August 28, 2025 Hackers breached Salesloft to steal OAuth/refresh tokens for Drift AI chat;…
Latest Cybersecurity News — Page 2641
View all →
Neovim Line Manipulation: Copy and Move Like a Pro
Neovim command sequences visualization (click for full size) After returning to Neovim recently, I’ve discovered some powerful techniques for manipulating lines that have significantly improved…
TAG-144 Actors Attacking Government Entities With New Tactics, Techniques, and Procedures
Over the past year, a shadowy threat actor known as TAG-144—also tracked under aliases Blind Eagle and APT-C-36—has intensified operations against South American government institutions.…
New Research and PoC Reveal Security Risks in LLM-Based Coding
A recent investigation has uncovered that relying solely on large language models (LLMs) to generate application code can introduce critical security vulnerabilities, according to a…
The relentless rise of atmospheric CO2 since 1950
The Keeling Curve shows atmospheric CO2’s relentless rise (click for full size) In 1958, Charles David Keeling began measuring atmospheric carbon dioxide at the Mauna…
Kea DHCP Server Vulnerability Let Remote Attacker With a Single Crafted Packet
A newly disclosed vulnerability in the widely used ISC Kea DHCP server poses a significant security risk to network infrastructure worldwide. The flaw, designated CVE-2025-40779,…
CISA Releases Guide to Hunt and Mitigate Chinese State-Sponsored Threats
The Cybersecurity and Infrastructure Security Agency (CISA) unveiled a comprehensive Cybersecurity Advisory (CSA) designed to empower network defenders to detect, hunt, and mitigate the activities…
US, Japan, Seoul look to halt the unstoppable rise of North Korea’s fake IT workers
The US, Japan and South Korea pledged to intensify efforts to block North Korea’s use of overseas IT workers to raise money for its weapons…
Microsoft Unveils Storm-0501’s Advanced Cloud Ransomware Tactics
Microsoft Threat Intelligence has released a detailed report exposing a significant evolution in ransomware attacks, pioneered by the financially motivated threat actor Storm-0501. The group…
Maritime cybersecurity is the iceberg no one sees coming
Maritime transport, the backbone of global trade, is adapting to shifting economic, political, and technological conditions. Advances in technology have improved efficiency, bringing innovations such…
Qantas is building a group-wide AI capability
Qantas is investing in a “group-wide AI capability” with planned uses so far spanning corporate and customer support, inflight catering waste and procurement. The airline…
CISA Warns of Citrix Netscaler 0-day RCE Vulnerability Exploited in Attacks
CISA has issued an urgent warning regarding a critical zero-day vulnerability affecting Citrix NetScaler systems, designated as CVE-2025-7775. This memory overflow vulnerability enables remote code…