Amazon Web Services now requires multi-factor authentication for 100% of root users, marking a significant shift in its cloud security strategy. The announcement came during the company’s re:Inforce event, where AWS Enforces MFA as part of a broader effort to tighten access controls across its platform. This move aims to reduce the risk of unauthorized […]
Envilder, a newly introduced command-line interface (CLI) tool, offers a streamlined and secure method for managing environment variables by synchronizing them directly from Amazon Web Services (AWS) Systems Manager (SSM) Parameter Store. Designed to enhance secrets management and configuration hygiene, the tool enables developers and system administrators to sync parameters efficiently into local shell environments […]
The U.S. Government Accountability Office (GAO) has identified critical shortcomings in the guidance of the Continuous Diagnostics and Mitigation (CDM) Program, raising concerns over the effectiveness of federal network security and data protection efforts. In a recent review, the GAO urged the Department of Homeland Security (DHS) to address these gaps to better safeguard government […]
Security researchers have uncovered a stealthy new variant of the ClickFix LightPerlGirl malware that targets users through PowerShell scripting and clipboard hijacking. The attackers deliver the malicious payload via a compromised travel website, increasing the threat’s reach and complexity. This latest strain focuses on silently injecting the Lumma infostealer into victims’ systems. The method involves […]
The United States has emerged as the leading country in the number of unsecured surveillance cameras, raising significant concerns over privacy and cybersecurity. A new report reveals that thousands of cameras in homes and offices across the U.S. are accessible without proper security protocols, leaving live footage vulnerable to unauthorized viewing. These exposed devices, often […]
A cyberattack claimed by a pro-Israel hacktivist group has disrupted services at Iran’s Bank Sepah, according to reports from Iran-focused media outlets. The incident forced multiple bank branches to close and left customers unable to access their accounts. Payment processing systems also went offline, deepening the impact on both retail and commercial operations. Local media […]
The UK government’s latest fiscal strategy emphasizes a strong commitment to technology, with the UK AI cybersecurity funding 2025 initiative forming a key part of the Spending Review 2025. The review outlines increased investment in artificial intelligence, cybersecurity, and modernization efforts across intelligence services and public sector infrastructure. Among the sectors receiving support, the National […]
Fog ransomware operators are deploying an unusual combination of spyware, pentesting tools, and legitimate software in their latest cyberattacks, raising concerns among security analysts. The attackers leverage open-source penetration testing utilities alongside Syteca, a legitimate employee monitoring software, to infiltrate and control targeted systems. This blend of authorized and unauthorized tools complicates detection efforts, allowing […]
Microsoft has introduced a new export feature for its Windows Recall tool in Europe, giving users the ability to back up snapshots of their digital activity. The update allows individuals to manage and preserve their Recall data more securely, addressing privacy concerns tied to the tool’s automatic screen capture function. Microsoft Adds Export Tool aims […]
A cryptocurrency executive inadvertently exposed sensitive information during a Zoom call, leading to a costly breach that unraveled his digital life. The incident occurred when the CEO shared his screen during a virtual meeting, unknowingly revealing private access credentials. The mistake provided cybercriminals with a gateway into his accounts, resulting in the loss of $200,000. […]
A global account takeover campaign is exploiting a legitimate pentest tool to breach Entra ID environments, targeting over 80,000 user accounts across roughly 100 cloud tenants. The campaign, which escalated in December 2024, uses TeamFiltration—a penetration testing framework released at DefCon30—to compromise Microsoft Office 365 Entra ID users. Researchers at Proofpoint have identified the operation, […]
European law enforcement agencies dismantled a major dark web drug marketplace known as Archetyp, arresting eight individuals linked to the illicit operation. Authorities said the takedown, dubbed one of the largest of its kind, came after a coordinated investigation across multiple countries. Euro Cops Bust Archetyp marked a significant blow to underground online drug trade […]