Cybersecurity researchers have confirmed a surge in cyberattacks on U.S. insurance firms, attributed to the threat group Scattered Spider. Known for its sector-specific focus, this group previously targeted retailers in the U.K., then moved to U.S. retail firms. Now, it has shifted attention to the American insurance industry. A Coordinated Social Engineering Strategy John Hultquist, […]
Recently, hackers breached email accounts of several journalists at The Washington Post. The newspaper quickly discovered the attack on Thursday evening and promptly began an investigation. By Sunday, June 15, management sent an internal memo to employees, alerting them about the targeted intrusion. Attack Specifically Targeted Key Journalists According to The Wall Street Journal, hackers […]
More than 46,000 online-facing Grafana instances are still unpatched and vulnerable to CVE-2025-4123—a serious client-side flaw. This open redirect vulnerability allows attackers to load malicious plugins, hijack user sessions, and potentially take control of user accounts. Despite a fix released on May 21, many organizations have yet to upgrade, according to research by OX Security. […]
Every online interaction begins with a DNS query. When users access your site, DNS tells their browser where to go. Yet, the protocol behind this