A Bubble.io vulnerability was found in its use of Elasticsearch and cryptographic mechanisms. The flaw allows executing arbitrary requests, exfiltrating entire databases, and enumerating and profiling customer subdomains. What’s more,…

The Canadian Cybersecurity Center’s new technical advisory warns of increased cyber threat activity from China. Threat actors target network edge routers across critical infrastructure sectors in Canada. Some activity was…

Cisco announced that its OpenDNS service is no longer available to users in Belgium. This move is believed to stem from increasing legal pressures placed on digital intermediaries to combat…

A sophisticated attack was recently seen impersonating Google in phishing emails. Attackers use Google’s OAuth to generate signed and seemingly legitimate emails from Google. To build credibility, these lead recipients…

Mexico, Saudi Arabia, and Uzbekistan governments were revealed to be NSO Group customers. The details surfaced in a recent hearing in the WhatsApp versus Pegasus case.  This marks the first…

A new wave of email scams relies on a new variation of the classic “Hello pervert” technique. Attackers claim to have breached the recipient’s email and ask for a ransom…

Scammers manage to steal people’s money via fake job opportunities involving apps or products. These fraud campaigns leverage unsolicited job offers sent via social media that involve simple tasks with…