Hooking threats before they land.

Bait A Phish surfaces verified intel, and hands it to you in plain English—every morning, giving you the tools you need to stay three steps ahead of adversaries.

Join the Newsletter

New Research Links VPN Apps, Highlights Security Deficiencies

Tue, 19 Aug 2025 07:48:14 +0000

Citizen Lab has identified links between multiple VPN providers, and multiple security weaknesses in their mobile applications. The post New Research Links VPN Apps, Highlights Security Deficiencies appeared first on SecurityWeek.

Massive Allianz Life data breach impacts 1.1 million people

Tue, 19 Aug 2025 03:17:57 -0400

Hackers have stolen the personal information of 1.1 million individuals in a Salesforce data theft attack, which impacted U.S. insurance giant Allianz Life in July. [...]

Hijacked Satellites and Orbiting Space Weapons: In the 21st Century, Space Is the New Battlefield

Tue, 19 Aug 2025 05:21:36 +0000

From hacked satellites to nuclear threats in orbit, the battle for dominance beyond Earth is redefining modern warfare and national security. The post Hijacked Satellites and Orbiting Space Weapons: In the 21st Century, Space Is the New Battlefield appeared first on SecurityWeek.

Noodlophile Stealer Hides Behind Bogus Copyright Complaints

Mon, 18 Aug 2025 20:28:52 GMT

Noodlophile is targeting enterprises in spear-phishing attacks using copyright claims as phishing lures.

XenoRAT malware campaign hits multiple embassies in South Korea

Mon, 18 Aug 2025 15:38:29 -0400

A state-sponsored espionage campaign is targeting foreign embassies in South Korea to deploy XenoRAT malware from malicious GitHub repositories. [...]

Nebraska man gets 1 year in prison for $3.5M cryptojacking scheme

Mon, 18 Aug 2025 15:05:03 -0400

A Nebraska man was sentenced to one year in prison for defrauding cloud computing providers of over $3.5 million to mine cryptocurrency worth nearly $1 million. [...]

ERMAC Android malware source code leak exposes banking trojan infrastructure

Mon, 18 Aug 2025 14:12:34 -0400

The source code for version 3 of the ERMAC Android banking trojan has been leaked online, exposing the internals of the malware-as-a-service platform and the operator's infrastructure. [...]

Workday Breach Likely Linked to ShinyHunters Salesforce Attacks

Mon, 18 Aug 2025 17:00:00 GMT

The HR giant said hackers mounted a socially engineered cyberattack on its third-party CRM system but did not gain access to customer information; only "commonly available" business contact info was exposed.

UK sentences “serial hacker” of 3,000 sites to 20 months in prison

Mon, 18 Aug 2025 12:36:46 -0400

A 26-year old in the UK who claimed to have hacked thousands of websites was sentenced to 20 months in prison after pleading guilty earlier this year. [...]

Over 800 N-able servers left unpatched against critical flaws

Mon, 18 Aug 2025 12:06:24 -0400

Over 800 N-able N-central servers remain unpatched against a pair of critical security vulnerabilities tagged as actively exploited last week. [...]

Mozilla warns Germany could soon declare ad blockers illegal

Mon, 18 Aug 2025 11:39:42 -0400

A recent ruling from Germany's Federal Supreme Court (BGH) has revived a legal battle over whether browser-based ad blockers infringe copyright, raising fears about a potential ban of the tools in the country. [...]

Novel 5G Attack Bypasses Need for Malicious Base Station

Mon, 18 Aug 2025 15:30:14 +0000

Researchers detailed a new 5G attack named Sni5Gect that can allow attackers to sniff traffic  and cause disruption. The post Novel 5G Attack Bypasses Need for Malicious Base Station appeared first on SecurityWeek.

Get the daily threat digest

A single email, every morning. No spam. Unsubscribe anytime.