Category: IT Support

Security researchers at Varonis have documented an attack technique called Reprompt that allows attackers to extract sensitive information from Microsoft Copilot through a single user click, without requiring phishing emails, fake login pages, or malicious downloads that security awareness training teaches employees to avoid. The technique exploits a class of vulnerability called prompt injection, in […]

Continue Reading

Palo Alto Networks has disclosed and patched a denial-of-service vulnerability in PAN-OS affecting the GlobalProtect remote access VPN system. The flaw allows an unauthenticated attacker to send malformed requests to the GlobalProtect Portal or Gateway that trigger a firewall crash, forcing the affected device into maintenance mode and cutting off VPN access until the system […]

Continue Reading

Google is ending nearly two decades of quarterly Android Open Source Project releases, moving to a twice-yearly schedule with a major source code drop in Q2 and a smaller one in Q4. Android itself is not slowing down. The operating system will continue receiving four version updates per year, including quarterly platform releases. What is […]

Continue Reading

Okta’s threat intelligence identifies payroll diversion fraud as one of the fastest-growing cybercrime categories targeting businesses, and the reason it is growing is the same reason it is difficult to catch: it does not look like a cyberattack. No systems are locked, no data is visibly exfiltrated, and no alerts fire. An attacker calls or […]

Continue Reading

McAfee research documents what security professionals observe every year with increasing sophistication: the conditions that make the holiday shopping season commercially productive for legitimate retailers make it equally productive for cybercriminals. Urgency, distraction, high transaction volume, and the expectation of promotional communications from brands create an environment where the verification habits that protect consumers and […]

Continue Reading

Researchers are documenting a rise in WhatsApp account compromises that bypass the authentication controls most security awareness training focuses on. Attackers are not stealing passwords, breaking encryption, or triggering the login alerts that would prompt immediate response. They are exploiting WhatsApp’s own device-linking feature to silently attach their browser to a victim’s account, gaining real-time […]

Continue Reading

Scammers have found a way to send phishing emails that originate directly from PayPal’s own servers, pass through standard email security filters without triggering alerts, and arrive in recipients’ inboxes formatted with authentic PayPal branding. The attack exploits PayPal’s legitimate Subscriptions feature to generate real notification emails carrying fraudulent content, including fabricated high-value purchases and […]

Continue Reading