Category: Security

Palo Alto Networks has disclosed and patched a denial-of-service vulnerability in PAN-OS affecting the GlobalProtect remote access VPN system. The flaw allows an unauthenticated attacker to send malformed requests to the GlobalProtect Portal or Gateway that trigger a firewall crash, forcing the affected device into maintenance mode and cutting off VPN access until the system […]

Continue Reading

Google is ending nearly two decades of quarterly Android Open Source Project releases, moving to a twice-yearly schedule with a major source code drop in Q2 and a smaller one in Q4. Android itself is not slowing down. The operating system will continue receiving four version updates per year, including quarterly platform releases. What is […]

Continue Reading

Okta’s threat intelligence identifies payroll diversion fraud as one of the fastest-growing cybercrime categories targeting businesses, and the reason it is growing is the same reason it is difficult to catch: it does not look like a cyberattack. No systems are locked, no data is visibly exfiltrated, and no alerts fire. An attacker calls or […]

Continue Reading

McAfee research documents what security professionals observe every year with increasing sophistication: the conditions that make the holiday shopping season commercially productive for legitimate retailers make it equally productive for cybercriminals. Urgency, distraction, high transaction volume, and the expectation of promotional communications from brands create an environment where the verification habits that protect consumers and […]

Continue Reading

Researchers are documenting a rise in WhatsApp account compromises that bypass the authentication controls most security awareness training focuses on. Attackers are not stealing passwords, breaking encryption, or triggering the login alerts that would prompt immediate response. They are exploiting WhatsApp’s own device-linking feature to silently attach their browser to a victim’s account, gaining real-time […]

Continue Reading

Scammers have found a way to send phishing emails that originate directly from PayPal’s own servers, pass through standard email security filters without triggering alerts, and arrive in recipients’ inboxes formatted with authentic PayPal branding. The attack exploits PayPal’s legitimate Subscriptions feature to generate real notification emails carrying fraudulent content, including fabricated high-value purchases and […]

Continue Reading

A JumpCloud and Google Workspace survey of IT leaders has produced findings that deserve more attention than the typical conversation about workplace software receives. Only 6% of IT leaders report that their current office software setup functions as it should, leaving 94% contending with problems that span rising costs, security vulnerabilities, and compounding operational complexity. […]

Continue Reading

The trajectory of RomCom RAT from financial crime tool to instrument of state-aligned cyber espionage is worth understanding not as a story about malware evolution but as evidence of how the threat landscape that businesses operate in has fundamentally changed. What began as a relatively conventional remote access trojan used for credential theft and account […]

Continue Reading

The same conditions that make the holiday season valuable for retailers make it attractive for attackers: high transaction volumes, elevated customer account activity, staff attention stretched across operational priorities, and the organizational pressure to keep orders moving that makes careful security review feel like a luxury. The RH-ISAC 2025 Holiday Season Cyber Threat Trends report […]

Continue Reading

Google has released a security update addressing 107 vulnerabilities across the Android ecosystem, and the detail that makes this patch more urgent than the volume alone suggests is that two of those vulnerabilities are not theoretical risks. CVE-2025-48633, an information disclosure flaw, and CVE-2025-48572, an elevation of privilege vulnerability, are both being actively exploited in […]

Continue Reading