NIST considered disabling NTP feeds after Boulder blackout caused clock drift
TL;DR A prolonged utility power outage at NIST’s Boulder campus disrupted the institute’s atomic time scale and prompted an attempt…
Google shutters Dark Web Report, nudges users toward other security tools
TL;DR Google is discontinuing its Dark Web Report, a breach-alert email service it launched in 2023, saying it lacked clear,…
Apple and Google begrudgingly allow alternative app stores in Japan
TL;DR In response to Japan’s Mobile Software Competition Act, Apple and Google have adjusted their mobile platform policies to permit…
About 1,000 systems hit in ransomware attack on Romanian water agency
TL;DR Romania's National Administration 'Romanian Waters' reported roughly 1,000 compromised systems after a ransomware incident that began Dec. 20. Core…
Ex-fugitive ‘wannabe MI6’ conman Mark Acklom must repay £125,000 to victim
TL;DR Mark Acklom, a 52-year-old fraudster who posed as an MI6 agent and Swiss banker, has been ordered to hand…
Poisoned npm WhatsApp API package steals messages, credentials and accounts
TL;DR A malicious npm package called lotusbail, downloaded over 56,000 times and available for roughly six months, impersonated a WhatsApp…
Pen testers say Eurostar accused them of ‘blackmail’ after chatbot flaws
TL;DR Security researchers at Pen Test Partners reported four vulnerabilities in Eurostar's public AI chatbot that could enable prompt injection,…
PRC-Nexus UNC6384 Campaign Hijacks Browsers, Delivers PlugX to Diplomats
TL;DR Google Threat Intelligence Group linked a multi-stage espionage campaign to PRC-nexus actor UNC6384 that targeted diplomats in Southeast Asia…
Mass Data Theft Hits Salesforce Instances Through Salesloft Drift Integration
TL;DR Google Threat Intelligence Group and Mandiant say an actor tracked as UNC6395 used compromised OAuth tokens tied to the…