Progressive Southeastern Insurance Company’s notice to consumers concerns an impostor whom they unknowingly hired, it seems: What Happened? In March 2025, we received anonymous information that a Progressive employee was working under someone else’s identity. We promptly began an internal investigation. The investigation determined that the employee had used someone else’s identity to obtain employment…
Sophos X-Ops investigates what financially motivated threat actors invest their ill-gotten profits in, once the dust has settled
Cybersecurity researchers have discovered a new campaign that exploits a known security flaw impacting Apache HTTP Server to deliver a cryptocurrency miner called Linuxsys. The vulnerability in question is CVE-2021-41773 (CVSS score: 7.5), a high-severity path traversal vulnerability in Apache HTTP Server version 2.4.49 that could result in remote code execution. “The attacker leverages
Cybersecurity researchers have discovered a new campaign that employs malicious JavaScript injections to redirect site visitors on mobile devices to a Chinese adult-content Progressive Web App (PWA) scam. “While the payload itself is nothing new (yet another adult gambling scam), the delivery method stands out,” c/side researcher Himanshu Anand said in a Tuesday analysis. “The…
Also ranked the top solution across 53 global reports.
Annie Fixler writes: Since 2011, the Islamic Republic of Iran and pro-regime hackers have increasingly utilized digital technology to threaten U.S. national security, conducting dozens of cyber operations against Americans. Recently, on June 30, the U.S. government issued an advisory warning that Iran may launch additional cyberattacks against U.S. critical infrastructure and the defense industrial base….
Bill Toulas reports: The Clop ransomware gang started to extort victims of its Cleo data theft attacks and announced on its dark web portal that 66 companies have 48 hours to respond to the demands. The cybercriminals announced that they are contacting those companies directly to provide links to a secure chat channel for conducting ransom payment negotiations….
