SecNews24.com
The digital age has made critical infrastructure increasingly vulnerable to malicious actors who understand that disrupting essential services creates panic…
Articles
Cyberattack on major oil pipeline triggers fuel supply disruption
Mobile Banking Trojan Slips Past Google Play Defences
A new mobile banking trojan has demonstrated how an Android threat can pass Google Play security checks while appearing to be an ordinary utility application.…
Critical Patch Tuesday Update Fixes Dozens of Security Flaws
Microsoft’s latest Patch Tuesday release addresses dozens of security weaknesses across Windows, Office, enterprise software, development tools and other…
Hacktivist Group Leaks Stolen Police Data After Ransomware Failed
A politically motivated hacking collective has published what it claims to be sensitive internal files pulled from a national law enforcement network, after a…
Emotet returns: fresh variant spotted after global takedown
Threat analysts have identified a renewed wave of Emotet activity targeting organisations across multiple regions, including Australia, signalling that the…
SQL Injection Flaw Exposes Risk Across E-Commerce Platforms
A SQL injection vulnerability in a popular e-commerce platform can turn an ordinary online shop into a gateway to customer records, order histories and…
Sticky wild slots put casino security in the spotlight
A sticky wild is one of the most recognisable features in modern online slots. When it lands, the symbol can remain fixed on the reels for several spins,…
criminals weaponise fake job postings to spread infostealers
Threat actors are now launching fake job postings to distribute infostealer malware onto unsuspecting victims, transforming the job advert into a delivery…
Silent iMessage: zero-click exploit reaches Australian iPhones
A newly disclosed zero-click attack chain targeting iOS devices through iMessage has put Australian iPhone users and the businesses that rely on them on high…
CISA Flags Exploited Flaw in Enterprise Email Gateway Software
The U.S. Cybersecurity and Infrastructure Security Agency has added a critical remote code execution vulnerability in a widely deployed enterprise email…