Written by: Rommel Joven, Josh Fleischer, Joseph Sciuto, Andi Slok, Choon Kiat Ng
Update (September 3): This post was updated to include information about GoTokenTheft usage.
In a recent investigation, Mandiant Threat Defense discovered an active ViewState deserialization attack affecting Sitecore...
The backdoor is a sophisticated VBA-based malware targeting Microsoft Outlook
Après la pause estivale, la rentrée s’annonce riche en projets et en défis pour notre association. Après une période de repos, il est temps de se mobiliser ensemble pour renforcer la sensibilisation et les bonnes pratiques en matière de cybersécurité. Septembre : des temps forts pour démarrer l’anné...
Le Clusif participe cette année encore à cet événement incontournable annuel de la cybersécurité qui aura lieu à Monaco du 8 au 11 octobre 2025. Nous accueillerons nos membres et visiteurs dans un espace renouvelé, plus vaste que les années précédentes et nos experts sont pleinement mobilisés pour c...
Cloudflare has notified customers that hackers may have accessed their data as part of the Salesloft Drift campaign
Barracuda observed new methods to disguise phishing links in Tycoon phishing attacks, which are designed to bypass automated email security systems
AI is one of the most significant innovations to emerge in the last 5 years. Generative AI (gen AI) models are now smaller, faster, and cheaper to run. They can solve mathematical problems, analyze situations, and even reason about cause‑and‑effect relationships to generate insights that once requir...
Evertec subsidiary Sinqia has posted details of an attempt to steal $130m from two B2B partners
The Confidential Clusters project integrates confidential computing technology into Kubernetes clusters. It's an end-to-end solution that provides data confidentiality on cloud platforms by isolating a cluster from its underlying infrastructure. In a confidential cluster, all nodes run on top of co...
Ever Care Corporation d/b/a Right at Home experienced a data security event involving unauthorized access to certain files, potentially impacting employee personal information. The incident was discovered on September 3, 2025, and was claimed by Sinobi on October 8.
MetroWest Community Federal Credit Union suffered a data breach on September 1, 2025, where unauthorized access to certain systems and files was detected. The breach potentially affected sensitive information including names, Social Security numbers, financial account numbers, and payment card numbe...
Google refutes claims that all 2.5 billion Gmail users are at risk.
The US Immigration agency has resumed a $2m contract with the Graphite spyware developer, now owned by US investor AE Industrial Partners
A malicious npm package “nodejs-smtp” has been discovered impersonating nodemailer and injecting code to drain crypto wallets
Added an acknowledgement. This is an informational change only.
Experts have revealed an Azure AD vulnerability exposing ClientId and ClientSecret in a publicly accessible appsettings.json file
Jaguar has proactively shut down systems to mitigate the impact of the incident, amid reports that workers at a UK manufacturing plant had been told to stay at home
Kerberos is the default authentication protocol in on-prem Windows environments. We’re launching a 6-part YouTube series, a technical deep dive into Kerberos. We’ll break down the protocol, dissect well-known attacks, and cover defensive strategies to keep your environment secure.
The UK National Cyber Security Centre thinks public disclosure programs could help mitigate AI safety threats
Zscaler has emerged as the latest corporate victim of a supply chain attack targeting Salesforce data