Bitdefender

A vishing attack on an overseas contact center exposed 5.67 million Qantas customer records in 2025, Australia’s privacy regulator says. Key takeaways An attacker posing as “Qantas IT help” manipulated a contact center agent into authorizing a malicious data connection. Approximately 5.67 million customer records were compromised, including contact and frequent-flyer information. Credit card details, passport data, passwords, PINs and account login credentials were not exposed.

German retailer Lidl is notifying customers of a data breach after cybercriminals gained unauthorized access to customer information via one of its third-party service providers. Key takeaways Lidl has disclosed a data breach affecting customers of its online shop in Germany, Belgium, and the Netherlands after one of its IT service providers was compromised. Stolen data includes customer identifiers and other account details.

A seven-year investigation has culminated in criminal charges against three Russian nationals accused of operating a "bulletproof hosting" network that enabled ransomware, phishing, malware, and other cybercriminal operations responsible for more than $62 million in victim losses.

I’d like to thank my coauthors, Andrei-Marius Muntea, Andrei Mermeze, Radu-Marian Portase, and Vlad Lazar, for their invaluable contributions to this research. TL;DR: Windows includes a file-system virtualization feature that can redirect one local path to another without modifying the original file or leaving a persistent filesystem artifact. It is implemented by bindflt.sys, the Bind Filter minifilter driver, and used legitimately by Store apps, Windows Sandbox, and Windows containers.

SMB Security Enterprise Security Ransomware Bitdefender Threat Debrief Threat Intelligence This edition of the Bitdefender Threat Debrief covers the latest developments in the ransomware threat landscape, including Qilin’s fall from the number one rank in Top Groups. Other events featured in this release include the arrest of a Scattered Spider operator, the criminal act of ransom negotiation, and an update on the FortiBleed campaign.

One week it's looksmaxxing or auromaxxing, and the next it's tanmaxxing. If you're a parent of a tween or teenager, you've probably noticed that social media is full of trends promising the "ideal" appearance. Some focus on skincare, others on fitness or facial features. Now, a growing number of videos are encouraging young people to chase the perfect summer glow.

Instagram charity scams exploit compassion, urgency and social proof to make fraudulent appeals feel trustworthy. An emotional Reel, desperate DM or donation link in the comments may conceal a story fabricated to steal your money and data. Key takeaways Instagram charity scams use emotional stories and urgent deadlines to discourage donors from verifying who controls the fundraiser.

Many cyberattacks begin with a stolen, guessed, or reused password. When employees manage dozens of accounts, from Google Workspace to banking, accounting, and social media, it becomes tempting to reuse passwords or save them in unsafe places. But password reuse across multiple platforms is the number one reason behind identity theft and losses associated with account takeover.

When a company falls victim to a ransomware attack, it is not uncommon for it to turn to experts for help. Specialist ransomware negotiation firms handle communications with criminal gangs on a victim's behalf. They know how the ransomware gangs operate, how to buy time, and how to push back on extortionate demands. They can help manage the technical side of any payment if needed, and help a corporate victim assess whether decryptors actually work.

Hackers don't always need to break into your systems if they can convince someone inside your business to open the door for them. People are naturally trusting, work under pressure, and make quick decisions throughout the day. Cybercriminals understand this and design their attacks around human behavior rather than technical weaknesses. Key takeaways: Overall, 43% of UK businesses experienced a cyber security breach or attack in the 2025/2026 survey period. (UK Gov Cyber Breaches Survey).