Latest

Dozens of major companies have now confirmed they were impacted by the Salesloft Drift compromise. Among the victims are cybersecurity leaders Zscaler and Palo Alto Networks, SaaS providers Workiva, PagerDuty, and Exclaimer, internet giant Cloudflare, and several others. Background on the Attack Last week, it was revealed that hackers compromised

Automaker Jaguar Land Rover (JLR) has confirmed it was forced to shut down several systems following a cyberattack that disrupted both production and retail operations. Company Response “JLR has experienced a cyber incident. We took immediate steps to mitigate its impact by proactively taking our systems offline,” the company said

The record for the most powerful distributed denial-of-service (DDoS) attack, set in June 2025, has already been surpassed. Cloudflare announced that it recently mitigated the largest attack ever recorded, peaking at 11.5 terabits per second (Tbps). The Attack “Cloudflare’s defense systems operate without interruption. Over the past few

Last week, several media outlets reported that Google was allegedly mass-notifying all 2.5 billion Gmail users to urgently change their passwords and enable two-factor authentication. Google has since clarified that these claims are false and that Gmail has not suffered a security breach. The Origin of the Claims The

Developers at Sangoma Technologies Corporation have issued an urgent warning about an actively exploited zero-day vulnerability in FreePBX. The flaw affects systems with their administration panel exposed to the internet. What is FreePBX? FreePBX is an open-source PBX (Private Branch Exchange) platform built on top of Asterisk. It is widely

Researchers at ReversingLabs, a software supply chain security firm, have uncovered a flaw in the Visual Studio Code (VS Code) Marketplace that allows attackers to reuse the names of previously deleted extensions. The vulnerability came to light after the team detected a malicious extension called ahbanC.shiba, which closely resembled

Kaspersky Lab researchers have reported a new wave of attacks by the extortion group OldGremlin, targeting Russian companies in the first half of 2025. Eight large enterprises—mostly in the industrial sector—were affected, along with organizations in healthcare, retail, and IT. Background on OldGremlin The group first appeared five