Silk Typhoon hackers hijack network captive portals in diplomat attacks

Published on August 26, 2025

State-sponsored hackers linked to the Mustang Panda activity cluster targeted diplomats by hijacking web traffic to redirect to a malware serving website. [...]

Continue reading on website
Other news

Salesloft breached to steal OAuth tokens for Salesforce data-theft attacks

August 26, 2025
Hackers breached sales automation platform Salesloft to steal OAuth and refresh tokens from its Drift chat agent integration with Salesforce to pivot to customer environments and exfiltrate data. The ShinyHunters extortion group claims responsibility for these additional Salesforce attacks. [...]

Citrix fixes critical NetScaler RCE flaw exploited in zero-day attacks

August 26, 2025
Citrix fixed three NetScaler ADC and NetScaler Gateway flaws today, including a critical remote code execution flaw tracked as CVE-2025-7775 that was actively exploited in attacks as a zero-day vulnerability. [...]