Cybersecurity News

Security researchers at Ontinue have uncovered a sophisticated phishing campaign that leverages Scalable Vector Graphics (SVG) files to bypass conventional email security mechanisms. This emerging technique embeds obfuscated JavaScript code within SVG files to initiate malicious redirects—without requiring attachments, downloads, or user interaction beyond previewing the file.

In a significant move to bolster national cybersecurity, the UK’s National Cyber Security Centre (NCSC) has announced the launch of the Vulnerability Research Initiative (VRI) — a new program designed to deepen collaboration with external cybersecurity researchers. The initiative aims to enhance the discovery, analysis, and mitigation of software and hardware vulnerabilities that pose threats to the UK's infrastructure, government, businesses, and citizens.

Cybersecurity and Infrastructure Security Agency (CISA) issued six new advisories concerning Industrial Control Systems (ICS). These advisories address critical vulnerabilities and offer mitigation guidance for affected vendors and systems. Below is an overview of the advisories and their key points:

One of the latest threats pushing the boundaries of mobile malware is Konfety—a recently observed Android malware family that has adopted advanced tactics such as ZIP file manipulation and dynamic code loading to evade security defenses and carry out ad fraud.