Iran-aligned BladedFeline cyber-espionage campaign targets government entities in Iraq and Kurdistan.
Posted inCybersecurity News

Iran-aligned BladedFeline cyber-espionage campaign targets government entities in Iraq and Kurdistan.

A sophisticated and long-running cyber-espionage campaign, attributed to an Iran-aligned threat group known as “BladedFeline,” has been observed targeting government entities in Iraq and the Kurdistan Regional Government (KRG), according to new research by cybersecurity firm ESET. Since its initial activities in 2017, BladedFeline has significantly evolved its toolset and operational tactics, posing a persistent threat to sensitive government operations in the region.
Amazon Issues Warning: Surge in Fake Membership Subscription Emails Ahead of Prime Day
Posted inCybersecurity News

Amazon Issues Warning: Surge in Fake Membership Subscription Emails Ahead of Prime Day

As Amazon Prime Day approaches, the company is alerting customers about a significant increase in phishing scams targeting their accounts. Cybercriminals are sending fake membership subscription emails designed to steal personal information, login credentials, and financial data by impersonating official Amazon communications ahead of the highly anticipated event.
Hackers threaten to release massive cache of stolen Telefonica data.
Posted inCybersecurity News

Hackers threaten to release massive cache of stolen Telefonica data.

Telefónica, one of Europe’s largest telecommunications providers, is facing a cybersecurity crisis after a hacker claimed to have exfiltrated a vast trove of sensitive company data. The threat actor, operating under the alias “Rey” and associated with the Hellcat Ransomware group, has threatened to release the entire cache of stolen information unless the company meets undisclosed demands.
Researchers note a dramatic surge in Android malware incidents in the second quarter of 2025.
Posted inCybersecurity News

Researchers note a dramatic surge in Android malware incidents in the second quarter of 2025.

The Android ecosystem has experienced a dramatic surge in malware incidents during the second quarter of 2025, with security researchers reporting a 151% increase in detected threats compared to the previous quarter. This escalation is marked by a notable rise in adware trojans, banking trojans, and cryptocurrency-targeted malware, reflecting both the growing sophistication and organization of cybercriminal operations targeting Android users worldwide.
Researchers release technical details and a previously withheld detection script that can identify exploitation of Citrix Bleed 2 vulnerability.
Posted inCybersecurity News

Researchers release technical details and a previously withheld detection script that can identify exploitation of Citrix Bleed 2 vulnerability.

Security researchers at WatchTowr have published comprehensive technical details and a detection script to help organizations identify exploitation attempts targeting the recently disclosed CitrixBleed 2 vulnerability (CVE-2025-5777). This critical security flaw affects Citrix NetScaler ADC and Gateway devices and has raised significant concerns across the cybersecurity community due to its potential to expose sensitive information.
The 47-day SSL certificate is coming: What it means for website owners and IT cybersecurity.
Posted inCybersecurity News

The 47-day SSL certificate is coming: What it means for website owners and IT cybersecurity.

The world of digital security is on the cusp of a significant transformation. By March 15, 2029, the maximum validity period for public SSL/TLS certificates will be reduced from the current 398 days to just 47 days. This change, approved by the CA/Browser Forum and supported by major browser vendors and certificate authorities, is set to redefine how organizations approach website security and certificate management.