⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
AWS Shield Advanced is integrating the AWS WAF Anti-DDoS managed rule group as the default application-layer (L7) DDoS protection, replacing the previous automatic mitigation system. The new rule group, launched in June 2025, is designed to detect HTTP request floods—a common attack vector—by profiling traffic and establishing baselines faster.
AWS Shield Advanced is integrating the AWS WAF Anti-DDoS managed rule group as its default application-layer DDoS protection. The rule group learns normal traffic patterns and will be added to eligible web ACLs in Count mode without disrupting existing rules.
A wave of deceptive Android apps, dubbed "Aftercall," is bombarding users with intrusive pop-up ads after every phone call. These apps, found on Google Play, disguise themselves as alarm clocks, calendars, and other utility tools, tricking users into granting "appear on top" permissions.
Aftercall is a wave of deceptive Android apps on Google Play that pose as everyday tools while bombarding users with pop-up ads after every phone call. When an unexpected ad pops up every time you hang up a call, it will slowly...
Attackers have fundamentally shifted their approach from stealing passwords to stealing session tokens and authentication cookies, making traditional password reset strategies ineffective as a containment measure. Even when a victim resets their password, active session tokens remain valid, allowing attackers to maintain access indefinitely without needing the new credentials.
As attackers shift from password theft to session and token theft to bypass multifactor authentication controls, organizations must move beyond login security and protect authenticated sessions.