Critical vulnerabilities in Amazon Elastic Kubernetes Service (EKS) allow overprivileged containers to steal AWS credentials through packet sniffing and spoofing attacks. Amazon EKS flaws let attackers exploit the 169.254.170.23:80 endpoint by intercepting plaintext traffic or deploying fake HTTP servers. These exposures, disclosed on June 19, 2025, underscore the risks in AWS’s shared responsibility model. The […]
The United States Embassy in India has introduced new guidance requiring F, M, and J visa applicants to make their social media accounts publicly viewable. Visa applicants must make social media settings accessible to assist consular officials in verifying identity and confirming eligibility under U.S. immigration law. The embassy emphasized that every visa application undergoes […]
The European Cyber Security Organisation announced that Dr. Joanna Świątkowska will assume the role of Secretary General starting July 2025. ECSO names Świątkowska successor to founding Secretary General Dr. Luigi Rebuffi, who has led the organization since its inception. The appointment marks a significant leadership transition for ECSO, which plays a central role in strengthening […]
Europol dismantled a major cryptocurrency fraud ring that stole €460 million ($540 million) from more than 5,000 victims worldwide. The international crackdown, known as Operation Borrelli, was led by Spain’s Guardia Civil with support from law enforcement agencies in Estonia, France, and the United States. Europol busts €460 million crypto scam networks like this as […]
The Scottish Government has prohibited the use of mobile messaging applications on all official devices, a move that affects ministers, civil servants, advisers and contractors. The Scottish Government bans messaging apps to strengthen data security and reduce the risk of unauthorized communications across government operations. The policy applies uniformly across departments and is designed to […]
Satellite images show US airstrikes heavily targeted Iran’s Fordow nuclear facility, a fortified uranium enrichment site located deep underground. The imagery highlights concentrated bombing patterns, offering a rare visual glimpse into the extent of the damage inflicted by American bunker-buster munitions. Analysts believe the strikes aimed to disrupt Iran’s nuclear infrastructure without launching a full-scale […]
A new privacy-focused web browser has entered the market, aiming to disrupt the growing ecosystem of online surveillance. Called Psylo, the browser introduces a unique approach to privacy by isolating each browser tab into its own virtual container. Psylo Browser targets trackers naturally by preventing data from being shared between tabs, making it harder for […]
A critical security flaw in Django applications allows attackers to achieve remote code execution by chaining directory traversal with a CSV parsing weakness. The Django CSV flaw lets hackers exploit file upload endpoints that use the pandas library, enabling them to overwrite server files and run arbitrary Python code. The vulnerability was publicly disclosed on […]
CoinMarketCap, a widely used platform for tracking cryptocurrency prices, suffered a brief but damaging website breach that exposed visitors to a wallet-draining scam. The CoinMarketCap hack triggers concerns over the growing risk of supply chain attacks targeting crypto platforms with large user bases. Attackers compromised the site’s infrastructure and injected malicious code that displayed a […]
The federal government’s SAVE database, long a source of confusion for state officials, is now at the center of a renewed political clash. Trump expands voter checks by directing states to use the immigration verification system to confirm voter citizenship, a move that has reignited concerns over voter suppression. Critics argue the expansion could block […]
Citrix has issued patches for a critical vulnerability in its NetScaler ADC and NetScaler Gateway products that attackers exploited as a zero-day. The Citrix ZeroDay Flaw Hit impacted systems before security teams could deploy fixes, prompting urgent updates across affected infrastructure. The company confirmed the exploitation and addressed the issue through newly released security updates. […]
Qantas has disclosed a significant data breach that compromised the personal information of nearly six million frequent flyer members. Qantas says data theft occurred after unauthorized access to a third-party platform used to manage its loyalty program. The airline confirmed that sensitive details, including names, dates of birth, and travel details, were among the data […]