5+ hour, 5+ min ago   (463+ words) At the time of publication, none of the three agencies had publicly responded to the letter. The proposal asks CISA to issue a Binding Operational Directive requiring all federal civilian agencies to remove legacy VPN appliances that are directly accessible…...

1+ day, 3+ hour ago   (341+ words) NordLabs has introduced NordBot, a free experimental AI-powered assistant designed to help users quickly determine whether a link, message, or image appears safe or potentially malicious. The announcement was made through NordVPN's official X account, making it a verified release…...

2+ day, 1+ hour ago   (279+ words) Threat actors are reportedly exploiting email addresses exposed in data breaches leaked by the ShinyHunters group to send sextortion emails demanding $2,000 in Bitcoin. The emails claim to come from the infamous threat actor and tell recipients that attackers compromised their…...

4+ day, 21+ hour ago   (303+ words) A webmail-targeting campaign run by the threat actor tracked as Void Blizzard, LAUNDRY BEAR, CL-STA-1114, and TA488 (formerly UNK_PitStop), was exploiting half-click cross-site scripting (XSS) zero-days against Zimbra (CVE-2025-27915) for at least five months during 2025. A joint intelligence agencies advisory, Proofpoint Threat…...

5+ day, 10+ min ago   (305+ words) A widespread DNS poisoning campaign compromises hotel and conference center Wi-Fi captive portal gateways to steal Microsoft 365 credentials. A July 23, 2026, ReliaQuest Threat Research report said the threat actors do not rely on phishing emails, endpoint compromise, or malicious links – just…...

1+ week, 4+ hour ago   (223+ words) A spokesperson for U.S. Attorney Leah Foley, whose office prosecuted the case, confirmed the sentence. His attorneys said in court papers that Svara felt "profound remorse and shame for his actions," which occurred during a period of isolation as a University…...

1+ week, 1+ day ago   (286+ words) Scammers use emails, phone calls, social media, or forums to contact potential victims, leveraging deepfakes and caller ID spoofing. The first scheme relies on fraudulent social media profiles and pages impersonating FBI personnel or IC3 itself. Scammers infiltrate online groups built…...

1+ week, 5+ day ago   (983+ words) The UK's communications regulator, Ofcom, has launched a formal investigation into TikTok's child safety practices while also introducing new measures aimed at reducing scam text messages and spoofed calls. Both announcements were made in mid-July 2026 and form part of Ofcom's…...

1+ week, 6+ day ago   (388+ words) The UK government has confirmed that it will not introduce restrictions on virtual private networks (VPNs) as part of its upcoming online safety measures, reversing earlier concerns that privacy tools could be affected by new age verification rules. The announcement…...

2+ week, 51+ min ago   (347+ words) The Iranian government exploited well-known vulnerabilities in global telecoms infrastructure to locate U.S. military personnel in the buildup to the Iran war and during the early days of the conflict, the Financial Times (FT) alleged, citing research from the Mobile Surveillance…...