Category: Security

McAfee research documents what security professionals observe every year with increasing sophistication: the conditions that make the holiday shopping season commercially productive for legitimate retailers make it equally productive for cybercriminals. Urgency, distraction, high transaction volume, and the expectation of promotional communications from brands create an environment where the verification habits that protect consumers and […]

Continue Reading

Researchers are documenting a rise in WhatsApp account compromises that bypass the authentication controls most security awareness training focuses on. Attackers are not stealing passwords, breaking encryption, or triggering the login alerts that would prompt immediate response. They are exploiting WhatsApp’s own device-linking feature to silently attach their browser to a victim’s account, gaining real-time […]

Continue Reading

Scammers have found a way to send phishing emails that originate directly from PayPal’s own servers, pass through standard email security filters without triggering alerts, and arrive in recipients’ inboxes formatted with authentic PayPal branding. The attack exploits PayPal’s legitimate Subscriptions feature to generate real notification emails carrying fraudulent content, including fabricated high-value purchases and […]

Continue Reading

A JumpCloud and Google Workspace survey of IT leaders has produced findings that deserve more attention than the typical conversation about workplace software receives. Only 6% of IT leaders report that their current office software setup functions as it should, leaving 94% contending with problems that span rising costs, security vulnerabilities, and compounding operational complexity. […]

Continue Reading

The trajectory of RomCom RAT from financial crime tool to instrument of state-aligned cyber espionage is worth understanding not as a story about malware evolution but as evidence of how the threat landscape that businesses operate in has fundamentally changed. What began as a relatively conventional remote access trojan used for credential theft and account […]

Continue Reading

The same conditions that make the holiday season valuable for retailers make it attractive for attackers: high transaction volumes, elevated customer account activity, staff attention stretched across operational priorities, and the organizational pressure to keep orders moving that makes careful security review feel like a luxury. The RH-ISAC 2025 Holiday Season Cyber Threat Trends report […]

Continue Reading

Google has released a security update addressing 107 vulnerabilities across the Android ecosystem, and the detail that makes this patch more urgent than the volume alone suggests is that two of those vulnerabilities are not theoretical risks. CVE-2025-48633, an information disclosure flaw, and CVE-2025-48572, an elevation of privilege vulnerability, are both being actively exploited in […]

Continue Reading

Security researchers at Koi Security have documented a campaign called ShadyPanda that represents a meaningful departure from how most malware operations work and why it matters for businesses that have not yet taken browser extension security seriously. More than 100 browser extensions, available through both the Chrome Web Store and the Microsoft Edge Add-ons marketplace, […]

Continue Reading

Cisco has patched a security vulnerability in its Identity Services Engine and ISE Passive Identity Connector that could have allowed attackers with valid administrator credentials to access sensitive data stored within the system. The vulnerability is rated medium severity, which in practical terms means it is not the kind of flaw that allows an unauthenticated […]

Continue Reading