Why Were Brazilian Government Websites Sending Visitors to Gambling Pages?
A Chinese-speaking threat cluster turned Brazilian government and university domains into trusted fronts for gambling scams, phishing and search manipulation.
Rob Nidschelm
Tech tinkerer who spends too much time with home labs and Docker stacks. Into AI, Roman & Medieval history, and all things sci-fi. Avid traveller, reader and writer, with a passion for good food.
The Ransomware Crew Had 50 Attack Techniques Ready Before Lunch
A ransomware operator used AI agents to execute more than 50 attack techniques in under ten hours, turning a complex intrusion into a machine-paced workflow.
One WhatsApp Video Call Could Expose Every Photo on Your Locked Android
On some Android phones, a person holding the locked device can answer a WhatsApp video call, open Meta AI's editor and browse the photo gallery without a PIN or biometric check.
A BGP Hijack Made Virtualizor Install Malware as an Update
A BGP hijack diverted Softaculous traffic, obtained a valid TLS certificate and delivered a malicious Virtualizor update to real servers.
How a Signed Faronics Deploy Installer Gave Hackers Remote Control
Phishing victims installed a legitimate Faronics Deploy agent that enrolled their computers into attacker-controlled management consoles.
Plex Told Every Server Owner to Patch. It Still Won’t Say What It Fixed.
Plex gave every server owner and Desktop user a version target, but it has not disclosed the CVEs, severity or practical attack paths behind the warning.
Your WordPress Backup Could Be Waiting to Betray You
A poisoned trackback can hide inside a WordPress backup until an administrator restores it, turning routine recovery into remote code execution.
They Stole the Keys to Brazil’s Payment Rails, Then Sent Hundreds of Transfers
BREEZE COMET stole the credentials and certificates behind trusted Brazilian payment workflows, then executed hundreds of fraudulent transactions within 24 to 48 hours.
ShinyHunters Talked Their Way Into a Major Banking Provider
Jack Henry says ShinyHunters used vishing to enter a non-production environment, exposing PII associated with fewer than ten clients.
A Rails Image Upload Could Hand Back Your Secrets as Pixels
Attackers are exploiting a Rails Active Storage flaw that can render server secrets as pixels and expose the keys needed for deeper compromise.