Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
4 / 4 results
highpublicGeopoliticalNorway Fines Microsoft's Xandr €8.6M Over Grindr Data Sharing Violations
This enforcement action exemplifies the divergence between European and U.S. regulatory approaches to data privacy and digital sovereignty. Norway, operating under the European Economic Area framework and applying GDPR standards, has imposed its larg…
highpublicGeopoliticalNorway fines Microsoft-owned Xandr $9.6M for Grindr data violations
This enforcement action reflects Norway's assertive stance on digital sovereignty and data protection, consistent with broader European regulatory efforts to constrain U.S. technology firms' data practices.
highbug_reportVulnerabilityFake AI sites use browser-in-browser attacks to steal ad account MFA
Advertising account managers, media buyers, and agency staff using Google, Meta, TikTok, and Okta authentication. Campaign uses fake ChatGPT, Gemini, Claude, and Perplexity sites hosted on Vercel/Railway/Render infrastructure.
highbug_reportVulnerabilityAdform ad platform compromised to inject crypto-stealing clipboard scripts
Adform ad platform and all websites embedding Adform advertising scripts. Any site visitor copying cryptocurrency wallet addresses during the compromise window was at risk of clipboard hijacking.