Salesforce has disabled the Klue competitive intelligence application from its AppExchange marketplace following reports of OAuth token abuse that potentially exposed sensitive customer data. The incident involved improper handling of authentication tokens, allowing unauthorized access to Salesforce
A massive data leak has exposed the membership roster and internal communications of Dialog, an exclusive invite-only network founded by billionaire Peter Thiel. The breach reveals detailed personal information of hundreds of influential tech executives, investors, politicians, and intelligence comm
Apple has released a firmware update addressing a critical vulnerability in Beats Studio Buds and Beats Studio Buds+ that allowed nearby attackers to hijack the microphone and eavesdrop on users. The flaw (CVE-2024-54537) affected the Bluetooth pairing process, enabling unauthorized access within Bl
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert after approximately 74,000 Fortinet firewall credentials were leaked online through the “FortiBleed” incident. The exposed credentials include VPN login details, device configurations, and administrative access to
A staggering compilation of 24 billion stolen credentials has been discovered in what researchers are calling one of the largest credential dumps in history. The dataset, dubbed “MOAB” (Mother of All Breaches), aggregates previously leaked credentials from thousands of breaches spanning multiple yea
AutoJack is a critical vulnerability affecting AI agents that autonomously browse web content. By crafting a malicious webpage with embedded instructions, attackers can achieve remote code execution (RCE) on the host system running the AI agent. This attack exploits the trust boundary between natura
Gentlemen ransomware-as-a-service (RaaS) has emerged with sophisticated tactics that leverage multiple Endpoint Detection and Response (EDR) killing tools to disable security software before encryption. The operation employs bring-your-own-vulnerable-driver (BYOVD) attacks and exploits legitimate ut
International law enforcement agencies have successfully disrupted the SocGholish botnet infrastructure operated by the notorious Evil Corp cybercrime group. The operation dismantled command-and-control servers responsible for distributing fake browser updates that infected thousands of systems worl
Operation Escaneo represents a sophisticated evolution in Latin American cybercrime, marking a departure from traditional financially-motivated attacks toward advanced persistent threat tactics. This campaign targets government entities, financial institutions, and critical infrastructure across mul
A sophisticated clipper malware campaign leveraging Tor network infrastructure is actively targeting cryptocurrency users by intercepting and replacing wallet addresses in the clipboard while simultaneously exfiltrating seed phrases. This malware operates stealthily, monitoring clipboard activity fo