Security Bulletin

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Inspired by Xavier's diary entry " A PNG Image With an Embedded Gift", I updated my pngdump.py program to enable the extraction of chunks and extra data (similar to my other analysis tools, like pngdump.py).

Wireshark release 4.4.7 fixes 1 vulnerability (%%cve:2025-5601%%) and 8 bugs.

Several widespread ClickFix campaigns are underway, bent on delivering malware to business targets, and they represent a new level of phishing sophistication that defenders need to be prepared for, researchers warn.

The malicious packages create backdoor endpoints and act as wipers when activated.

Security pros warn that the leaked data could be used to launch profiling, phishing, or other targeted attacks.

Identiverse 2025: IAM providers plot authentication without the TSA pat down to deliver ‘fast pass’ to frictionless logins.

Agentic AI technology will be integrated into the recently launched F5 Application Delivery and Security Platform.

Though the operation was partially disrupted earlier this year, the botnet remains active and continues to target connected Android devices.

During "CISO: The Worst Job I Ever Wanted," several chief information security officers reveal how difficult it is to be in a role that, despite being around for decades, remains undefined.

Rev Up to Recert Bonus is now available! Learn and earn up to 45 Continuing Education credits for free until August 7, 2025.