Latest IntelligenceThreat IntelligencePage 3
Search by keyword →
EFF-led coalition urges FTC to reject X’s bid to end privacy oversight
A coalition of 15 public-interest organizations is urging the U.S. Federal Trade Commission (FTC) to reject X Corp.'s request to terminate or weaken a 2022 priv...
OONI: LaLiga piracy blocks disrupted over 500,000 legitimate sites
The Open Observatory of Network Interference (OONI) reports that Spain's IP-based anti-piracy blocking campaign against unauthorized LaLiga streams caused wides...
Mozilla tightens rules for certificate authorities to improve web security
Mozilla has released version 3.1 of its Mozilla Root Store Policy (MRSP), introducing new requirements aimed at improving transparency and oversight across the ...
WhatsApp opens username reservations ahead of feature rollout
Meta has announced that WhatsApp users can now reserve usernames ahead of a broader launch planned for later this year, introducing a long-awaited privacy featu...
US offers $10 million for info on Russian hackers targeting Signal accounts
The U.S. Department of State has announced a reward of up to $10 million for information leading to the identification or location of members of UNC5792. This i...
U.S. offers $10 million for hackers targeting WhatsApp, Signal users
The U.S. Department of State is offering up to $10 million for information that helps identify or locate members of the UNC5792 and UNC4221 hacker groups, which...
Cybersecurity firms targeted by fraudulent OpenAI organization invites
Threat actors are creating OpenAI tenants that impersonate legitimate companies and inviting employees to join them, in what appears to be a ploy to trick targe...
Polymarket suffers supply chain attack leading to $3 million crypto theft
Polymarket says it has contained a supply chain attack that injected malicious code into its website after a compromised third-party vendor exposed some users t...
Shopify Shop app users are seeing fake orders in purchase histories
Scammers are placing fake purchase receipts inside Shopify's Shop app, exploiting users' trust in order-tracking applications to lure them into calling fraudule...
50% of LG and Samsung smart TV apps embed residential proxies
Thousands of smart TV applications available on LG and Samsung platforms contain software that turns devices into residential proxy nodes. Researchers at Spur I...
WhatsApp users targeted by ongoing VBScript malware campaign
Kaspersky researchers have uncovered an ongoing malware campaign that uses compromised WhatsApp accounts to distribute malicious VBScript attachments. The attac...
Anthropic to introduce age and ID checks for Claude users on July 8
Anthropic has updated its privacy policy to disclose that Claude users may be asked to verify their age or identity beginning July 8, a change that could requir...
Klue OAuth breach victim list grows as Icarus hackers claim attack
Market intelligence platform Klue has publicly confirmed a recent security incident that allowed threat actors to steal OAuth tokens used to connect to customer...
Klue OAuth breach linked to 'Icarus' Salesforce data theft attacks
Market intelligence platform Klue suffered a OAuth breach that enabled the "Icarus" threat actors to steal Salesforce CRM data from multiple organizations in an...
Steam Workshop hosts wallpapers with account-stealing malware
Researchers at Kaspersky have uncovered dozens of malicious wallpapers distributed through Steam Workshop that were designed to steal Steam accounts and infect ...
Apple Intelligence expands to Google infrastructure with privacy safeguards
Apple has announced an expansion of its Private Cloud Compute (PCC) platform, extending the privacy-focused infrastructure behind Apple Intelligence beyond the ...
WhatsApp says it caught NSO attempting to spy on users again
WhatsApp says it has disrupted new social engineering campaigns linked to Israeli spyware maker NSO Group and is now asking a US federal court to hold the compa...
New 'HTTP/2 Bomb' DoS attack crashes web servers in under a minute
A new denial-of-service (DoS) attack dubbed HTTP/2 Bomb can be launched from a single machine to take down web servers within seconds. [...]...
Dashlane hit by brute-force campaign triggering account suspensions
Dashlane has confirmed that a brute-force attack over the weekend triggered a wave of account suspension emails, unusual login notifications, and authentication...
Signal users targeted by attackers seeking backup recovery keys
Signal users are being targeted in a new phishing campaign that attempts to steal recovery keys used to access the platform's encrypted cloud backups. Attackers...