Stealthy ‘City-Forum’ Attacks Target Salesforce and ServiceNow With Custom Toolset

Sophisticated ‘City-Forum’ Campaign Targets Salesforce and ServiceNow with Custom Toolset A highly skilled threat actor has been quietly targeting major companies using a custom-made toolset that exploits vulnerabilities in both Salesforce and ServiceNow. Dubbed “City-Forum,” this campaign has been observed hitting telecoms, banks, financial services firms, enterprise software vendors, and public sector portals. The attackers … Read more

WhatsApp Unveils New Scam Alert Feature

WhatsApp has rolled out a new beta feature called Scam Alert, designed to identify suspicious messages from unknown senders. This optional tool uses machine learning to flag potential scams, working alongside WhatsApp’s end-to-end encryption rather than undermining it. The feature is available for select users in a limited beta rollout, and once enabled, a model … Read more

Mindgard Raises $30 Million to Protect AI Systems

Mindgard Secures $30 Million in Funding to Protect AI Systems from Emerging Threats A significant funding boost has been given to Mindgard, a startup specializing in automated AI security and red-teaming solutions. The London- and Boston-based company has raised $30 million in a Series A investment round, bringing its total funding to nearly $42 million. … Read more

Belgium’s eID Authentication Opens Citizen Accounts to RCE

Belgium’s Electronic Identity System Left Vulnerable to Hackers A critical flaw in the browser extension used by millions of Belgian citizens to log into sensitive online accounts has left their identities and financial information at risk. The vulnerability, discovered by security researchers, allows hackers to steal personal data, hijack payment cards, and even execute malicious … Read more

Attackers Exploit SharePoint Authentication Bypass After Public PoC Release

Cybersecurity researchers have discovered a severe vulnerability in Microsoft SharePoint that allows attackers to bypass authentication and gain unauthorized access to sensitive data. The flaw, which was publicly disclosed earlier this week, has left many organizations scrambling to patch their systems and mitigate potential risks. SharePoint is a popular collaboration platform used by millions of … Read more

Stealthy ‘City-Forum’ Attacks Target Salesforce and ServiceNow With Custom Toolset

A Sophisticated Campaign Targets Salesforce and ServiceNow with Custom Toolset Researchers at Reco have uncovered a stealthy and innovative campaign that’s been targeting both Salesforce and ServiceNow using a custom-made multi-platform toolset. Dubbed “City-Forum”, this campaign has been exploiting vulnerabilities in both platforms, primarily focusing on unauthenticated guest user access. The primary targets of the … Read more

WhatsApp Unveils New Scam Alert Feature

WhatsApp has just unveiled a new Scam Alert feature, designed to protect users from phishing attacks and scams. This optional tool uses machine learning to analyze incoming messages for suspicious patterns, flagging potential threats without compromising end-to-end encryption. The feature is still in its beta phase, but it’s an exciting development that could help reduce … Read more

Mindgard Raises $30 Million to Protect AI Systems

Mindgard Secures $30 Million to Protect Against AI Risks In a significant move to bolster defenses against the growing threat of artificial intelligence (AI) security risks, Mindgard, an AI security startup, has raised $30 million in a Series A funding round. This investment brings the company’s total funding close to $42 million and paves the … Read more

Belgium’s eID Authentication Opens Citizen Accounts to RCE

Belgian Citizens’ eID Accounts Exposed to Remote Code Execution Threats A severe vulnerability in a widely-used browser extension has compromised the security of millions of Belgian citizens’ electronic ID (eID) accounts. The Connective signing extension, which allows users to authenticate with government and banking services online using their physical smart cards, contains critical flaws that … Read more