GitHub Account Compromise Led to Salesloft Drift Breach Affecting 22 Companies

Salesloft has revealed that the data breach linked to its Drift application started with the compromise of its GitHub account. Google-owned Mandiant, which began an investigation into the incident, said the threat actor, tracked as UNC6395, accessed the Salesloft GitHub account from March through...

Salesloft Drift Supply Chain Incident

We recently became aware of a widespread Salesloft / Drift supply chain incident that impacted third-party integrations with Drift. We are providing this update as part of our commitment to transparency and keeping our customers informed about the security of our platform and products. The key...

Feds Seize $6.4M VerifTools Fake-ID Marketplace, but Operators Relaunch on New Domain

Authorities from the Netherlands and the United States have announced the dismantling of an illicit marketplace called VerifTools that peddled fraudulent identity documents to cybercriminals across the world. To that end, two marketplace domains verif.tools and veriftools.net and one blog have be...

AI SOC 101: Key Capabilities Security Leaders Need to Know

Security operations have never been a 9-to-5 job. For SOC analysts, the day often starts and ends deep in a queue of alerts, chasing down what turns out to be false positives, or switching between half a dozen tools to piece together context. The work is repetitive, time-consuming, and high-stake...

Perplexity AI ignores no-crawling rules on websites, crawls them anyway

Imagine putting up a no-trespassing sign for people walking their dogs, and then finding out that one person dresses up their Great Dane as a calf and walks it on your grounds. Well that's sort of what AI answer engine Perplexity has been doing, by evading the no-crawl directives of websites,...

Scattered Spider Hacker Arrests Halt Attacks, But Copycat Threats Sustain Security Pressure

Google Cloud's Mandiant Consulting has revealed that it has witnessed a drop in activity from the notorious Scattered Spider group, but emphasized the need for organizations to take advantage of the lull to shore up their defenses. "Since the recent arrests tied to the alleged Scattered Spider...

CVE-2025-52089

creationtimestamp| type| source ---|---|--- 2025-07-17 21:02:37+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lu6tdmzivy2x 2026-03-12 21:02:39+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mgvcd3vznm27...

GHSA-VGQ5-3255-V292

creationtimestamp| type| source ---|---|--- 2025-07-16 05:28:57+00:00| seen| https://gist.github.com/safer-bot/73e30ba01b2bab580ce5322378f7dd94 2025-07-16 10:52:33+00:00| seen| https://gist.github.com/safer-bot/45933a69f437440b7f18a4500149377e 2025-07-16 16:05:44+00:00| seen|...

GHSA-2F88-5HG8-9X2X

creationtimestamp| type| source ---|---|--- 2025-07-16 03:28:42+00:00| seen| https://gist.github.com/safer-bot/685bc6d74a8ba9535ec0a502d8e83d05 2025-07-16 03:44:39+00:00| seen| https://gist.github.com/safer-bot/a2f85bb3abd40ab169cfae05635f3231 2025-07-16 05:45:14+00:00| seen|...

GHSA-3VQJ-43W4-2Q58

creationtimestamp| type| source ---|---|--- 2025-07-16 03:12:23+00:00| seen| https://gist.github.com/safer-bot/79174d0c201539d79b25fe0f667fa43e 2025-07-16 03:39:54+00:00| seen| https://gist.github.com/safer-bot/2d5f96fb1f5118b0adf472cee7a0dff8 2025-07-16 04:37:01+00:00| seen|...

Russian Basketball Star Daniil Kasatkin Arrested in Ransomware Probe

Daniil Kasatkin, a Russian pro basketball player, faces US ransomware charges after his Paris arrest. His lawyer claims he's "useless with computers," raising questions about his alleged negotiator role in cybercrime...

CBI Shuts Down £390K U.K. Tech Support Scam, Arrests Key Operatives in Noida Call Center

India's Central Bureau of Investigation CBI has announced that it has taken steps to dismantle what it said was a transnational cybercrime syndicate that carried out "sophisticated" tech support scams targeting citizens of Australia and the United Kingdom. The fraudulent scheme is estimated to ha...

CBI Shuts Down £390K U.K. Tech Support Scam, Arrests Key Operatives in Noida Call Center

India's Central Bureau of Investigation CBI has announced that it has taken steps to dismantle what it said was a transnational cybercrime syndicate that carried out "sophisticated" tech support scams targeting citizens of Australia and the United Kingdom. The fraudulent scheme is estimated to ha...

A week in security (July 7 – July 13)

Last week on Malwarebytes Labs: Deepfake criminals impersonate Marco Rubio to uncover government secrets McDonald’s AI bot spills data on job applicants Millions of people spied on by malicious browser extensions in Chrome and Edge No thanks: Google lets its Gemini AI access your apps, including...

Metadata Shows the FBI’s ‘Raw’ Jeffrey Epstein Prison Video Was Likely Modified

There is no evidence the footage was deceptively manipulated, but ambiguities around how the video was processed may further fuel conspiracy theories about Epstein’s death...

CVE-2025-7370

Rejected reason: Upon investigtion upstream maintainers discovered this was not a real issue. See the references for more details. See: https://gitlab.gnome.org/GNOME/libsoup/-/issues/430note2494090...

SUSE CVE-2025-7370

Upon investigtion upstream maintainers discovered this was not a real issue. See the references for more details. See: https://gitlab.gnome.org/GNOME/libsoup/-/issues/430note2494090...

Ransomware negotiator investigated over criminal gang kickbacks

If someone is going to negotiate with criminals for you, that person should at least be on your side. That might not have been the case at Digital Mint, a ransomware negotiation company where one worker allegedly went rogue. According to Bloomberg, Digital Mint is cooperating with the US Departme...

CVE-2025-24335

creationtimestamp| type| source ---|---|--- 2025-07-02 12:47:34+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114783712216991743 2025-07-02 13:22:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsycmsiqng2a...

Qantas: Breach affects 6 million people, “significant” amount of data likely taken

Australia's largest airline Qantas has confirmed that cybercriminals have gained access to a third party customer servicing platform that contained 6 million customer service records. Qantas says the breach occurred after a cybercriminal targeted a call centre and managed to gain access to the...