AsyncRAT Exploits ConnectWise in New Malware Campaign
AsyncRAT exploits ConnectWise in a recent malware campaign that highlights how attackers weaponize legitimate remote access tools. Security researchers uncovered a layered attack chain that delivered the trojan through fileless techniques, persistence tricks, and data theft. The operation reveals the growing sophistication of remote access trojans and the increasing risks for businesses relying on widely used IT management software. How

Salty2FA Phishing Kit Targets Enterprises With MFA Bypass
The Salty2FA phishing kit has quickly gained attention as one of the most dangerous phishing tools of 2025. Unlike older phishing kits that only capture usernames and passwords, this service also bypasses multiple forms of multi-factor authentication (MFA). That ability makes stolen credentials far more valuable and leaves enterprises exposed to full-scale account takeovers. What Makes Salty2FA Different? Salty2FA is

ChatGPT Projects Feature Becomes Free With Split Chat Toggle
The ChatGPT Projects feature has now been unlocked for all users, including those on the Free tier. This major change marks a shift in how OpenAI delivers productivity tools. By removing barriers, the company enables more people to structure their work, organize chats, and manage tasks within one platform. Alongside this update, a brand-new split chat toggle has been introduced.

Google CNIL Fine: €325M Penalty for Cookie Breaches in France
The Google CNIL fine has become one of the largest penalties ever issued in France for data protection failures. France’s data regulator, the Commission Nationale de l’informatique et des Libertés (CNIL), announced a €325 million penalty against Google after uncovering two major violations. These breaches involved misleading Gmail advertisements and a lack of valid cookie consent during account creation. The
Streameast Shutdown: Police Dismantle Pirated Streaming Giant
The Streameast shutdown represents one of the most significant anti-piracy operations in recent memory. Authorities dismantled the world’s largest illegal sports streaming platform, arresting its operators and uncovering a vast money laundering scheme. With more than a billion visits annually, Streameast had become a major player in illicit broadcasting, rivaling legitimate platforms in scale and reach. The Police Operation On

Bridgestone Cyberattack Disrupts North American Manufacturing
A cyberattack on Bridgestone (a giant in the tire manufacturing business) has shaken operations across North America, disrupting tire production at major facilities. While the company claims the incident was contained and limited, local officials and industry observers suggest the disruption may be far wider. The attack underscores the growing threat to industrial supply chains as hackers increasingly target manufacturing

Workiva Data Breach Exposes Contact Data After Salesforce Attack
The Workiva data breach adds to a growing list of companies caught in the ongoing wave of Salesforce-related attacks. The SaaS provider confirmed that attackers exploited a Salesforce-connected application, leading to the exposure of customer contact details. Although Workiva’s platform itself remains uncompromised, the incident raises concerns about the growing reliance on third-party integrations and the phishing risks that follow.

Grok AI Exploit Spreads Malicious Links on X
Cybercriminals have uncovered a dangerous loophole in Grok AI, the chatbot integrated into X. By embedding harmful links inside video ad metadata, attackers trick the system into revealing them. This Grok AI exploit spreads malicious links to millions of users and raises major concerns about the safety of AI-powered assistants. How the Exploit Works The attack begins with a promoted

Cloudflare Data Breach Exposes Salesforce Support Cases in Supply-Chain Attack
The recent Cloudflare data breach highlights the growing risks of supply-chain attacks targeting SaaS integrations. Hackers exploited Salesloft’s Drift connection with Salesforce, giving them unauthorized access to Cloudflare’s internal support system. While the company confirmed no core infrastructure was compromised, attackers exfiltrated sensitive support case data and API tokens. How the Breach Unfolded Attackers began reconnaissance on August 9, 2025,

Thinking Effort ChatGPT Feature Lets Users Control AI Reasoning
OpenAI has introduced the new Thinking Effort ChatGPT feature, a tool that gives users more control over how the model reasons before answering. Instead of relying on a one-size-fits-all response, people can now adjust the level of reasoning to match the complexity of their request. This feature highlights OpenAI’s effort to improve transparency while offering personalization in AI interactions. What
