CISA: Attackers Breach Federal Agency via Critical GeoServer Flaw

CISA: Attackers Breach Federal Agency via Critical GeoServer Flaw Summary On 11 July 2024 threat actors exploited a critical remote-code-execution flaw (CVE-2024-36401) in GeoServer to breach a large, unnamed federal civilian executive branch (FCEB) agency. CISA responded after the agency’s EDR flagged activity, but found the agency’s incident response playbook, patching and telemetry access were […]

Read More →

Russia Targets Moldovan Election in Disinformation Play

Russia Targets Moldovan Election in Disinformation Play Summary Researchers have tracked a state-backed Russian disinformation campaign, tracked as Storm-1679 (aka Matryoshka), aimed at influencing Moldova’s 28 September 2025 parliamentary election. Silent Push’s research (published 23 Sept) ties the campaign technically to an earlier Russian propaganda operation called Absatz via shared code fingerprints and reused IP […]

Read More →

Airtime, merchants drive 12-fold profit growth for GTCO’s HabariPay

Airtime, merchants drive 12-fold profit growth for GTCO’s HabariPay Summary HabariPay, the fintech arm of Guaranty Trust Holding Company (GTCO), reported a 12-fold increase in profit to ₦4.02 billion (about $2.70 million) in H1 2025, up from ₦322.9 million in H1 2022. The jump is driven largely by merchant payments and airtime/bill-payment sales margins. While […]

Read More →

Npm Package Hides Malware in Steganographic QR Codes

Npm Package Hides Malware in Steganographic QR Codes Summary Researchers from Socket Threat Research discovered a malicious npm package named “fezbox” that hid credential‑stealing malware inside steganographic QR codes. The package, presented as a harmless JavaScript/TypeScript utility library, fetched and executed an obfuscated payload encoded within a QR image. The payload could read browser cookies, […]

Read More →

The Star Sydney casino licence suspension extended to March 2026, regulators keep venue under independent oversight | Yogonet International

The Star Sydney casino licence suspension extended to March 2026, regulators keep venue under independent oversight | Yogonet International Summary The New South Wales Independent Casino Commission (NICC) has extended The Star Sydney’s casino licence suspension until at least 31 March 2026, concluding the company has not shown sufficient progress to resume control of its […]

Read More →