Login Subscribe

7secure Coverage

Articles

Search and filter the broader reporting stream across incidents, AI security, policy, and operational coverage.

Samsung TV ACR Data Harvest Fixed After Texas Lawsuit

Samsung TV ACR Data Harvest Fixed After Texas Lawsuit

Samsung’s Automatic Content Recognition (ACR) feature on Smart TVs was found to be silently capturing viewers’ content data and sending it to Samsung’s servers. The practice triggered privacy complaints and a consumer lawsuit in Texas, prompting Samsung to release a firmware update that disables ACR by default and

CrowdStrike Earns NCSC CIR Certification, Raising IR Standards for Defenders

CrowdStrike Earns NCSC CIR Certification, Raising IR Standards for Defenders

CrowdStrike announced that its incident response (IR) practice has been awarded the UK National Cyber Security Centre’s Certified Incident Response (CIR) assurance. The rigorous assessment examined the firm’s end‑to‑end IR workflow—including threat detection, containment, eradication, and post‑incident analysis—to confirm it meets the government‑

Cloud Imperium Data Breach Exposes Code, Credentials, and Million‑Player Data

Cloud Imperium Data Breach Exposes Code, Credentials, and Million‑Player Data

Cloud Imperium, the UK‑based studio behind Star Citizen, quietly announced a security incident that gave attackers access to its source‑code repositories and employee login credentials. The breach, uncovered by The Register, also appears to have leaked personal information belonging to over one million players, including usernames, email addresses,

Compliance & Regulation

Samsung TV ACR Data Harvest Fixed After Texas Legal Push

Samsung TV ACR Data Harvest Fixed After Texas Legal Push

Security researchers uncovered that Samsung Smart TVs were using the Automatic Content Recognition (ACR) feature to continuously capture and transmit viewers’ watching habits to Samsung’s servers, raising serious privacy concerns. After a class‑action lawsuit filed in Texas pressured the company, Samsung released a firmware update that disables ACR

Threat Intelligence

APT‑TA423 Uses ScanBox JavaScript Keylogger in News Site Watering‑Hole Attack

APT‑TA423 Uses ScanBox JavaScript Keylogger in News Site Watering‑Hole Attack

An APT group identified as TA423 weaponized the open‑source ScanBox reconnaissance tool and embedded it in compromised JavaScript on several high‑traffic news websites. Visitors to these sites were silently served the malicious script, which logs keystrokes, captures login credentials, and gathers system information before exfiltrating the data to

Threat Intelligence

Iran‑Aligned Threat Actors Intensify Phishing, Supply‑Chain, and Ransomware Campaigns in 2026

Iran‑Aligned Threat Actors Intensify Phishing, Supply‑Chain, and Ransomware Campaigns in 2026

Palo Alto Networks’ Unit 42 observed a marked uptick in activity by Iranian state‑aligned groups throughout 2026. The actors deployed highly crafted phishing lures, compromised third‑party software updates to infiltrate supply chains, and launched ransomware attacks that were often synchronized with regional political flashpoints such as elections, sanctions,

Malware & Ransomware

LummaStealer Returns, Teams with CastleLoader Dropper for Stealthy Access

LummaStealer Returns, Teams with CastleLoader Dropper for Stealthy Access

Bitdefender’s threat‑research team has confirmed that the long‑dormant LummaStealer infostealer has resurfaced, now piggybacking on the CastleLoader dropper to gain an initial foothold on victim machines. The combined chain is delivered through highly engineered social‑engineering lures that mimic legitimate user actions—such as software updates, document