Login Subscribe

Security Culture & Human Factors

Deepfake Voice Phishing Hits Finance Execs, Millions Lost

Deepfake Voice Phishing Hits Finance Execs, Millions Lost

Attackers are leveraging AI‑generated voice clips that mimic CEOs and CFOs to place urgent wire‑transfer requests. By bypassing traditional email filters and relying on real‑time phone calls, the fraudsters convince finance teams to move funds without the usual written verification, resulting in rapid, high‑value payouts. The

Russian Threat Actors Hijack Signal and WhatsApp via SIM‑Swap and Phishing

Russian Threat Actors Hijack Signal and WhatsApp via SIM‑Swap and Phishing

The FBI and CISA released a joint advisory warning that Russian‑backed groups are targeting users of Signal and WhatsApp. The actors combine SIM‑swap attacks with spear‑phishing messages to gain control of victims’ phone numbers, then seize the linked messaging accounts. Once compromised, the accounts are used to

OWASP Shifts from Meetup to Central Hub, Consolidates Defender Community

The OWASP Foundation announced it is retiring its dedicated Meetup platform after a steady decline in attendance and the widespread adoption of newer virtual collaboration tools. All community activities—including webinars, working‑group sessions, and discussion forums—will be moved to a single OWASP Community Hub. The Hub is designed

OWASP Sunsets Meetup Platform, Moves Community to Modern Collaboration Tools

The OWASP Foundation announced that its custom‑built Meetup platform will be retired effective immediately. Members of the global OWASP community are being directed to migrate their discussions, events, and knowledge‑sharing activities to contemporary services such as Discord, Slack, and various virtual conference systems. The decision is framed as

Open‑Source Display CLI Threatens CI/CD Supply‑Chain Integrity

Open‑Source Display CLI Threatens CI/CD Supply‑Chain Integrity

The GitHub project “displayflow_cli” offers a command‑line utility for configuring multiple monitors, a feature that can be handy for automating workstation setups in DevOps environments. However, the tool pulls in several external scripts at install time and provides only basic checksum verification, leaving the code path largely unchecked

OWASP Retires Meetup, Consolidates to Secure Platform

The OWASP Foundation announced that its public Meetup site will be decommissioned, instructing members to move discussions, event sign‑ups, and community coordination to the official OWASP website and approved partner platforms. The change is intended to simplify event management, reduce fragmented communication channels, and apply consistent security controls across

OWASP Moves From Meetup to Discord and GitHub: What Defenders Need to Know

The OWASP Foundation announced that its long‑standing Meetup group is being retired. The decision was driven by a desire to centralize community interaction on newer, more flexible platforms such as Discord and GitHub Discussions, where real‑time chat, threaded conversations, and integrated code review tools are readily available. For