AWS Trusted Advisor flaw allowed public S3 buckets to go unflagged
21
Aug
2025

AWS Trusted Advisor flaw allowed public S3 buckets to go unflagged

AWS’s Trusted Advisor tool, which is supposed to warn customers if their (cloud) S3 storage buckets are publicly exposed, could…

Critical CVE-2025-9074 Docker Desktop Vulnerability Fix
21
Aug
2025

Critical CVE-2025-9074 Docker Desktop Vulnerability Fix

A severe security vulnerability identified as CVE-2025-9074 has been discovered in Docker Desktop, exposing users to critical risks where malicious…

21
Aug
2025

Protecting Your AI-Powered Infrastructure — API Security

With innovation comes risk. As organizations race to build AI-first infrastructure, security is struggling to keep pace. Multi-Agentic Systems –…

Despite attracting major investors like Galaxy and e& Capital, crypto infrastructure provider Fuze was found to be in breach of its license
21
Aug
2025

Dubai imposes fines on ADQ-supported cryptocurrency infrastructure provider.

Regulator probes Fuze Unauthorized activities identified Remediation plan in progress Fuze, a crypto infrastructure provider supported by significant regional and…

Lowrys Farm owner, My Jewelry slammed as 138,000 Hongkongers hit in data leaks
21
Aug
2025

Lowrys Farm owner, My Jewelry slammed as 138,000 Hongkongers hit in data leaks

Hong Kong’s privacy watchdog has ruled that three retailers, including the local branch of a Japanese multinational company that owns…

UNC5518 Group Hacks Legitimate Websites to Inject Fake Captcha That Tricks Users to Execute Malware
21
Aug
2025

UNC5518 Group Hacks Legitimate Websites to Inject Fake Captcha That Tricks Users to Execute Malware

A sophisticated cybercrime operation has emerged, targeting unsuspecting internet users through a deceptive social engineering technique that exploits one of…

UNC5518 Group Hacks Legitimate Sites with Fake Captcha to Deliver Malware
21
Aug
2025

UNC5518 Group Hacks Legitimate Sites with Fake Captcha to Deliver Malware

The financially motivated threat group UNC5518 has been infiltrating trustworthy websites to install ClickFix lures, which are misleading phony CAPTCHA…

Key Findings from the Blue Report 2025
21
Aug
2025

Key Findings from the Blue Report 2025

As security professionals, it’s easy to get caught up in a race to counter the latest advanced adversary techniques. Yet…

Interview: Simon Goodyear, chief information and technology officer, Redwood Bank
21
Aug
2025

Interview: Simon Goodyear, chief information and technology officer, Redwood Bank

As a youngster, Simon Goodyear believed there was nothing that couldn’t be solved with technology, and he is now applying…

iOS 18.6.2, Zero-Day, Spyware, Security Update
21
Aug
2025

Apple Patches Zero-Day In IOS 18.6.2 After Targeted Exploits

Apple on Wednesday released iPadOS/iOS 18.6.2, as a security update addressing a zero-day vulnerability— tracked as CVE-2025-43300. The company said,…

New SHAMOS Malware Attacking macOS Via Fake Help Websites to Steal Login Credentials
21
Aug
2025

New SHAMOS Malware Attacking macOS Via Fake Help Websites to Steal Login Credentials

A sophisticated malware campaign targeting macOS users has emerged between June and August 2025, successfully attempting to compromise over 300…

MITM6 + NTLM Relay Attack Enables Full Domain Compromise
21
Aug
2025

MITM6 + NTLM Relay Attack Enables Full Domain Compromise

Cybersecurity researchers are highlighting a dangerous attack technique that combines rogue IPv6 configuration with NTLM credential relay to achieve complete…