This month in security with Tony Anscombe – August 2025 edition

From Meta shutting down millions of WhatsApp accounts linked to scam centers all the way to attacks at water facilities in Europe, August 2025 saw no shortage of impactful cybersecurity news

Source: This month in security with Tony Anscombe – August 2025 edition

Affiliates Flock to ‘Soulless’ Scam Gambling Machine

Last month, KrebsOnSecurity tracked the sudden emergence of hundreds of polished online gaming and wagering websites that lure people with free credits and eventually abscond with any cryptocurrency funds deposited by players. We've since learned that these scam gambling sites have proliferated thanks to a new Russian affiliate program called "Gambler Panel" that bills itself as a "soulless project that is made for profit."
Source: Affiliates Flock to ‘Soulless’ Scam Gambling Machine

Vulnérabilité dans Mattermost Server (31 juillet 2025)

Une vulnérabilité a été découverte dans Mattermost Server. Elle permet à un attaquant de provoquer un déni de service à distance.
Source: Vulnérabilité dans Mattermost Server (31 juillet 2025)

Vulnérabilité dans Shibboleth Identity Provider (27 août 2025)

Une vulnérabilité a été découverte dans Shibboleth Identity Provider. Elles permettent à un attaquant de provoquer une injection de code indirecte à distance (XSS).
Source: Vulnérabilité dans Shibboleth Identity Provider (27 août 2025)

First known AI-powered ransomware uncovered by ESET Research

The discovery of PromptLock shows how malicious use of AI models could supercharge ransomware and other threats

Source: First known AI-powered ransomware uncovered by ESET Research