Many businesses believe that if their payment systems pass a PCI DSS assessment, their online checkout pages are secure. However, security experts are warning that this assumption is no longer true. Modern checkout pages rely on numerous third-party scripts such as analytics tools, marketing tags, chat widgets, and tracking technologies. If one of these scripts … Continued
Cybersecurity researchers have uncovered a large-scale crypto clipper campaign that uses fake online promotion techniques to spread malware and steal cryptocurrency from victims. According to findings from Check Point Research, the attackers are using paid articles on legitimate news websites, fake reviews, social media content, and software-hosting platforms to make their malicious tools appear trustworthy. … Continued
India’s temporary Telegram ban created unexpected problems beyond its borders, with some users in the UAE and other regions reporting difficulties accessing the messaging platform. The issue began after the Indian government ordered a temporary block on Telegram until June 22, citing its alleged use by organized cheating networks linked to the NEET 2026 medical … Continued
Cybersecurity researchers have uncovered a new malware campaign that targeted software developers through the JetBrains Marketplace. Attackers uploaded 15 malicious plugins disguised as AI coding assistants. These plugins promised useful features such as code review, bug detection, unit test generation, and AI-powered coding help. However, their real purpose was to steal sensitive API keys from … Continued
Cybersecurity researchers have uncovered a new tactic being used by a ransomware group to hide malicious communications by abusing Microsoft Teams relay infrastructure. The technique allows attackers to disguise their command-and-control traffic as legitimate Microsoft Teams activity. By blending in with trusted network traffic, the criminals make it much harder for security tools and defenders … Continued
Cybersecurity experts are warning organizations after critical vulnerabilities in Fortinet FortiSandbox were found to be actively exploited in real-world attacks. The issue has gained attention because FortiSandbox is widely used to analyze suspicious files and detect threats before they reach corporate networks. The confirmation of active exploitation means attackers are no longer just studying the … Continued
Why the old model of vendor oversight is broken, what Gartner analysts say comes next, and how security leaders must prepare for an era of continuous risk intelligence Today’s biggest cyber risk may not be inside your organisation at all it could be sitting somewhere in your … Continued
Cybersecurity researchers have uncovered a serious supply chain attack involving dozens of popular WordPress plugins. The incident came to light after security experts discovered that plugin code had been secretly modified to include hidden backdoors. These plugins were previously trusted by thousands of website owners and had been downloaded by a large number of WordPress … Continued
Cybersecurity researchers have uncovered a large online scam operation that targeted internet users across the Middle East and North Africa (MENA) region. The campaign relied on fake Facebook accounts that pretended to be politicians, public figures, telecom companies, and trusted organizations. These accounts were used to attract users with offers that appeared genuine. The goal … Continued
Novo Nordisk, one of the world’s largest pharmaceutical companies, has disclosed a cybersecurity incident that resulted in unauthorized access to data related to some of its clinical trial participants. The company confirmed that certain information was copied from a limited number of internal IT systems without permission. Following the discovery, Novo Nordisk launched an investigation … Continued
