Massive JavaScript Malware Campaign Infects Over 269,000 Websites Using Novel Obfuscation Technique

Jun 20, 2025 | Podcast

https://unit42.paloaltonetworks.com/malicious-javascript-using-jsfiretruck-as-obfuscation Cybersecurity researchers have uncovered a large-scale malware campaign that compromised more than 269,000 legitimate websites in just one month using a sophisticated JavaScript...

Scattered Spider Cybercrime Group Shifts Focus to US Insurance Industry After Retail Attacks

Jun 19, 2025 | Podcast

https://www.theregister.com/2025/06/16/scattered_spider_targets_insurance_firms Google’s threat intelligence team has issued urgent warnings that the notorious Scattered Spider cybercrime group has pivoted from targeting retail companies to launching...

Apple Patches Zero-Click Messaging Vulnerability Exploited to Target European Journalists with Israeli Spyware

Jun 18, 2025 | Podcast

Graphite Caught: First Forensic Confirmation of Paragon’s iOS Mercenary Spyware Finds Journalists Targeted Apple has confirmed that a critical zero-click vulnerability in its Messages app was actively exploited by sophisticated attackers to infect European journalists...

Researchers Expose Massive Dark Advertising Network Using Fake CAPTCHAs to Spread Disinformation and Malware

Jun 17, 2025 | Podcast

https://krebsonsecurity.com/2025/06/inside-a-dark-adtech-empire-fed-by-fake-captchas/ Security researchers have uncovered a sophisticated criminal advertising ecosystem that leverages fake CAPTCHA challenges to trick users into enabling malicious push notifications,...

Australian Regulator Orders Superannuation Funds to Strengthen Authentication After Cyber Attacks

Jun 16, 2025 | Podcast

https://www.apra.gov.au/for-action-information-security-obligations-and-critical-authentication-controls Australia’s financial regulator has issued an urgent directive to all superannuation funds, demanding they assess and strengthen their authentication...

Massive Supply Chain Attack Targets npm and PyPI Ecosystems, Affecting Nearly One Million Weekly Downloads

Jun 13, 2025 | Podcast

https://www.aikido.dev/blog/supply-chain-attack-on-react-native-aria-ecosystem Cybersecurity researchers have uncovered a sophisticated supply chain attack targeting over a dozen packages associated with GlueStack, delivering malware to developers worldwide. The...