New Android Malware Wave Hits Banking via NFC Relay Fraud, Call Hijacking, and Root Exploits

14/08/2025 0 Comments 0 tags

Cybersecurity researchers have disclosed a new Android trojan called PhantomCard that abuses near-field communication (NFC) to conduct relay attacks for facilitating fraudulent transactions in attacks targeting banking customers in Brazil.

Have You Turned Off Your Virtual Oven?

14/08/2025 0 Comments 0 tags

You check that the windows are shut before leaving home. Return to the kitchen to verify that the oven and stove were definitely turned off. Maybe even circle back again

Simple Steps for Attack Surface Reduction

14/08/2025 0 Comments 0 tags

Story teaser text: Cybersecurity leaders face mounting pressure to stop attacks before they start, and the best defense may come down to the settings you choose on day one. In

Google Requires Crypto App Licenses in 15 Regions as FBI Warns of $9.9M Scam Losses

14/08/2025 0 Comments 0 tags

Google said it’s implementing a new policy requiring developers of cryptocurrency exchanges and wallets to obtain government licenses before publishing apps in 15 jurisdictions in order to “ensure a safe

CISA Adds Two N-able N-central Flaws to Known Exploited Vulnerabilities Catalog

14/08/2025 0 Comments 0 tags

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added two security flaws impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.  N-able

New PS1Bot Malware Campaign Uses Malvertising to Deploy Multi-Stage In-Memory Attacks

13/08/2025 0 Comments 0 tags

Cybersecurity researchers have discovered a new malvertising campaign that’s designed to infect victims with a multi-stage malware framework called PS1Bot. “PS1Bot features a modular design, with several modules delivered used

Zoom and Xerox Release Critical Security Updates Fixing Privilege Escalation and RCE Flaws

13/08/2025 0 Comments 0 tags

Zoom and Xerox have addressed critical security flaws in Zoom Clients for Windows and FreeFlow Core that could allow privilege escalation and remote code execution.  The vulnerability impacting Zoom Clients

AI SOC 101: Key Capabilities Security Leaders Need to Know

13/08/2025 0 Comments 0 tags

Security operations have never been a 9-to-5 job. For SOC analysts, the day often starts and ends deep in a queue of alerts, chasing down what turns out to be

Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code

13/08/2025 0 Comments 0 tags

Fortinet is alerting customers of a critical security flaw in FortiSIEM for which it said there exists an exploit in the wild. The vulnerability, tracked as CVE-2025-25256, carries a CVSS

Microsoft August 2025 Patch Tuesday Fixes Kerberos Zero-Day Among 111 Total New Flaws

13/08/2025 0 Comments 0 tags

Microsoft on Tuesday rolled out fixes for a massive set of 111 security flaws across its software portfolio, including one flaw that has been disclosed as publicly known at the