CISA Exposes Secrets, Credentials in 'Private' Repo
The agency's GitHub repository, publicly available since November 2025, was ironically named "Private-CISA."
Aggregator
Stealer Spoofs Google, Microsoft & Apple, Then Backdoors macOS
1 month ago
The SHub Reaper stealer, which hides behind fake WeChat and Miro installers, marks a shift from ClickFix social engineering to Apple script-based execution.
Elizabeth Montalbano
Dell security advisory (AV26-480)
1 month ago
Canadian Centre for Cyber Security
FBI: Americans lost over $388 million to scams using crypto ATMs in 2025
1 month ago
The FBI says Americans have lost over $388 million last year to scams using cryptocurrency kiosks, also known as crypto ATMs or Bitcoin ATMs. [...]
Sergiu Gatlan
Microsoft Self-Service Password Reset abused in Azure data theft attacks
1 month ago
A threat actor targeting Microsoft 365 and Azure production environments is stealing data in attacks that abuse legitimate applications and administration features. [...]
Bill Toulas
IBM security advisory (AV26-479)
1 month ago
Canadian Centre for Cyber Security
Drupal is rolling out an emergency security update on May 20. You cannot miss it
1 month ago
Drupal Is Pushing an Emergency Security Update Tomorrow. If You Run a Drupal Site, This Is Not One to Miss. Something significant is coming out of the Drupal project tomorrow, and the way the announcement is worded should be enough to get any site administrator’s attention. The Drupal Security Team has confirmed it will release […]
Pierluigi Paganini
Huawei zero-day attack behind last year’s crash of Luxembourg's entire telecoms network
1 month ago
There is no evidence that the incident has recurred, but the flaw remains unexplained and has not been publicly acknowledged by the company.
Mozilla security advisory (AV26-478)
1 month ago
Canadian Centre for Cyber Security
The Gentleman
1 month ago
You must login to view this content
cohenido
The Gentleman
1 month ago
You must login to view this content
cohenido
The Gentleman
1 month ago
You must login to view this content
cohenido
The Gentleman
1 month ago
You must login to view this content
cohenido
The Gentleman
1 month ago
You must login to view this content
cohenido
The Gentleman
1 month ago
You must login to view this content
cohenido
The Gentleman
1 month ago
You must login to view this content
cohenido
RALord
1 month ago
You must login to view this content
cohenido
Kimsuky Hackers Use LNK and JSE Lures to Target Recruiters, Crypto Users, and Defense Officials
1 month ago
North Korea-linked hackers are at it again, and this time they are casting a wide net. The Kimsuky threat group, a well-known cyber espionage unit with ties to the DPRK, ran four separate spear-phishing campaigns in the first half of 2025 targeting corporate recruiters, cryptocurrency investors and developers, defense sector officials, and graduate school administrators. […]
The post Kimsuky Hackers Use LNK and JSE Lures to Target Recruiters, Crypto Users, and Defense Officials appeared first on Cyber Security News.
Tushar Subhra Dutta
Protect your devices from IMSI catchers (ITSAP.00.106)
1 month ago
An international mobile subscriber identity (IMSI) catcher is a type of cell site simulator (CSS) that impersonates a legitimate cell tower to exploit connected mobile devices. It is important to understand how IMSI catchers work in order to detect them and protect your sensitive information from being compromised.
Canadian Centre for Cyber Security
Cell site simulators - ITSM.00.108
1 month ago
This publication provides information on how CSS devices work, the security risks you should consider, and the mitigation actions you can take to better protect from CSS exploitations.
Canadian Centre for Cyber Security