SafePal Data Breach: Authorization Flaw Exposes Data of Nearly 40,000 Customers
SafePal, a hardware wallet maker, has disclosed an authorization flaw in an order-tracking plug-in that exposed the personal information of approximately 39,798…
Category: Cyber News
Latest cybersecurity news, breaches, vulnerability disclosures and industry developments.
Snowflake GitHub Actions Flaw Allows Command Injection via Crafted Issues
Cybersecurity researchers at Wiz have disclosed a GitHub Actions workflow injection vulnerability in Snowflake's public snowflakedb/snowflake-connector-net repository. The flaw, present in the…
MCP Servers: A New Frontier for Enterprise Secrets Exposure
The rapid adoption of AI agents in the enterprise has introduced a new security challenge: the Model Context Protocol (MCP) servers that…
Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware
Threat actors are increasingly acquiring expired domains—known as "dropcatch domains"—to inherit their reputation and traffic, redirecting victims to scams and malware. According…
IAM Compliance Requirements and Best Practices: From Policy to Verified Enforcement
Identity and Access Management (IAM) compliance is the practice of proving that access controls are not just documented but actively enforced across…
Apple Warns Users in 110 Countries of Mercenary Spyware Targeting
Apple has issued a fresh batch of threat notifications to customers in 110 countries, warning that they may be targeted by mercenary…
CTM360 Uncovers 3,000+ Recruitment Phishing URLs Using Browser-in-the-Browser Credential Traps
Cybersecurity researchers at CTM360 have exposed a large-scale, global recruitment-themed phishing campaign that leverages Browser-in-the-Browser (BitB) windows to steal Google and Facebook…
Chrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows Browsers
Cybersecurity researchers at SpecterOps have detailed a post-exploitation technique that enables the Chrome DevTools Protocol (CDP) inside a running Google Chrome or…
Trump Memo Authorizes U.S. Firms to Hack and Disrupt Foreign Crime Groups
A new White House memo signed by U.S. President Donald Trump directs the National Coordination Center (NCC) to establish a program allowing…
ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 13 More Stories
This week's ThreatsDay Bulletin covers a wide range of cybersecurity developments, including new attack techniques, data breaches, and product updates. Key highlights…