Industry Spotlight
UNC6395 Hackers Accessed Systems via a GitHub Account, Salesloft Says
Security investigators from Google said UNC6395 hackers spent several months running through Salesloft and Drift systems before launching a data breach campaign that some security researchers say has targeted hundreds of technology ...
Security Boulevard
Burger King’s ‘Very Bad’ Bugs Leaked Your Data, Claim Gagged Hackers
Richi Jennings | | AI, API security, Burger King, canada, Carrols, Cloud Security, CloudFlare, Content Takedown, Cyber Security, Cybersecurity, Cyble, Data breach, Data Privacy, Data Security, DevSecOps, DMCA, FEATURED, Featured Articles, Firehouse Subs, Industry News, Information Security, IT Security and Data Protection, Network Security, Popeyes, Privacy, Restaurant Brands International, SB Blogwatch, security, Security News, Streisand Effect, takedown, takedowns, Tim Hortons, Top Stories, Vulnerabilities, website takedown, website takedowns
Streisand Effect in full effect: Restaurant Brands International (RBI) “assistant” platform riddled with terrible security flaws ...
Security Boulevard
GPUGate Malware Shows Hardware-Specific Evasion Tactics: Arctic Wolf
Jeffrey Burt | | Evasion Tactics, GitHub repositories, Google Ads malvertising, GPU, Malware, Ransomware
Bad actors are using GitHub's repository structure and paid Google Ads placements to trick EU IT users into downloading a unique malware dubbed "GPUGate" that includes new hardware-specific evasion techniques that may ...
Security Boulevard
Google Hack Redux: Should 2.5B Gmail Users PANIC Now?
Richi Jennings | | breach of privacy, communication and social engineering, CRM, CRM phishing, Gmail, Gmail spoofing, google, Google Threat Intelligence, Help Desk Social Engineering, journalism, malicious social engineering, Phishing and social engineering, Phone Social Engineering, Privacy, professional social engineers, Salesforce, salesforce security, Salesloft, SB Blogwatch, ShinyHunters, social engineering, social engineering attack, social engineering news vishing, UNC6040, UNC6240, vish, vishers, vishiing
Summer’s lease hath all too short a date: Let’s ask Ian Betteridge ...
Security Boulevard
NSA, FBI, Others Say Chinese Tech Firms are Aiding Salt Typhoon Attacks
Jeffrey Burt | | china espionage, Chinese companies, National Security Agency, Salt Typhoon cyberattack
A report from intelligence agencies in the U.S., UK, and elsewhere outlined how three Chinese tech firms are supply China's intelligence services with products and services that are being used in global ...
Security Boulevard
Farmers Group Loses 1.111M PII Rows: It’s Salesforce Again
Richi Jennings | | breach of privacy, Bristol West, communication and social engineering, CRM, CRM phishing, farmers, Farmers Group, Farmers Insurance Exchange, Foremost, Help Desk Social Engineering, malicious social engineering, Phishing and social engineering, Phone Social Engineering, Privacy, professional social engineers, Salesforce, salesforce security, SB Blogwatch, scattered spider, ShinyHunters, social engineering, social engineering attack, social engineering news vishing, UNC6040, UNC6240, vish, vishers, vishiing, Zurich Insurance Group
ShinyHunters Hunt Again: Scattered Spider claims another Salesforce instance—albeit three months ago ...
Security Boulevard
NOT-So-Great Firewall: China Blocks the Web for 74 Min.
Richi Jennings | | censorship, china, Denial of Service, Denial of Service (DoS) attacks, denial of service attacks, denial of service vulnerability, Denial-of-Service (DoS), Government Censorship, Great Firewall of China, HTTPS, HTTPS connection, internet censorship, online censorship, Pakistan, Peoples Republic of China, port 443, SB Blogwatch, State Censorship, TCP, TCP/IP, The Great Firewall, Transmission Control Protocol (TCP) vulnerabilities
Xi Whiz: HTTPS connections on port 443 received forged replies ...
Security Boulevard
UK Quietly Drops ‘Think of the Children’ Apple iCloud Crypto Crack Call
Richi Jennings | | ADP, Apple, Apple Data Security, Apple iCloud, back door, backdoors, British, British intelligence, Chat Control, E2EE, Encryption Backdoor, end-to-end encryption, gchq, Government Backdoors, ICloud, JD Vance, Privacy, SB Blogwatch, Sir Keir Starmer, Tulsi Gabbard, uk, United Kingdom, Won’t somebody think of the children?
ADP E2EE vs. UK: Brits agree to change course, but Tim still shtum ...
Security Boulevard
Norway Blames Pro-Russian Group for Hack of Water Dam
Norway's top security and intelligence agencies are accusing pro-Russian hacktivists with a cyberattack in April in which hackers took control of a dam's controls and opened an outflow valve, part of a ...
Security Boulevard
It Took a Day for SPLX, NeuralTrust to Jailbreak OpenAI’s GPT-5
Jeffrey Burt | | AI jailbreak, AI models security risks, generative AI, NeuralTrust, OpenAI GPT-5, SPLX
A day after OpenAI and Microsoft trumpeted the arrival of the GPT-5 generative AI model and its improved reasoning and other capabilities, two AI cybersecurity startups showed in separate reports that it ...
Security Boulevard

