Azure FrontDoor now has a CAPTCHA https://techcommunity.microsoft.com/blog/azurenetworksecurityblog/general-availability-of-captcha-in-azure-front-door-waf/4464704 image
Avast has released a free decrypter to allow victims of the Midnight ransomware to recover their files without paying the ransom
Fifteen individuals are expected to plead guilty this month in Italy to a complex hacking and extortion scheme. The individuals worked for Equalize, an Italian company that hacked government databases to create dossiers on the country's elite
lol
Add the ISD to the growing list of orgs (four now) warning us about AI chatbots repeating Russian disinfo... or Russia intentionally poisoning these things... The other three are the American Sunlight Project, NewsGuard, and Open Measures.
"Out of the multiple vulnerabilities we reported, WSO2 addressed and assigned a CVE identifier to only one: the Siddhi RCE via SOAP administration services (CVE-2025-5717 ). The remaining vulnerabilities were not remediated, and no CVEs were assigned by WSO2" Le sigh...
Europol has asked governments to work together on measures to prevent caller ID spoofing. International traceback mechanisms are needed to track down and identify the origin of spoofed calls.
Ravin Academy, the private school that recruits and trains hackers for Iran's MOIS intelligence service , has been hacked and its data leaked Public searchable database: https://ravin-academy.com/ image
After Security Explorations had its Firebase database suspended by Google Cloud for "hosting malware" (actually some PoC code), the team found a way to bypass the suspension, which they argue could be abused and automated by attackers as well
More than a thousand individuals who were held at the KK Park scam compound have fled or have been moved to new locations over the past week, according to Cyber Scam Monitor. The park was sanctioned by the US and raided by the Myanmar military junta https://cyberscammonitor.substack.com/p/whats-happening-at-kk-park