Explore

Rapid Read Rapid Read
Researchers Identify ProxySmart Software Enabling SIM Farms Across 19 U.S. States

Researchers Identify ProxySmart Software Enabling SIM Farms Across 19 U.S. States

Cybersecurity researchers have discovered a Belarus-based software platform, ProxySmart, which is facilitating the operation of SIM farms on a large scale. According to a report by Infrawatch, ProxySmart is linked to 87 control panels in 17 countries, including 94 phone farm locations across 19 U.S. states. These SIM farms are used for various cybercriminal activities such as smishing, premium-rate number fraud, and one-time password interception. The platform is marketed as a comprehensive solution for managing and monetizing mobile proxy infrastructure, making it accessible even to those with limited technical expertise. ProxySmart's features include automated IP rotation, remote device control, and network fingerprint spoofing, which help operators evade detection. The software supports both physical smartphones and USB 4G/5G modems, and is managed through a web-based control panel.
Trendline Trendline
Vercel Reports Customer Data Breach Predating Recent Hack, Expanding Security Concerns

Vercel Reports Customer Data Breach Predating Recent Hack, Expanding Security Concerns

Vercel Reports Customer Data Breach Predating Recent Hack, Expanding Security Concerns
Trendline Trendline
Meta Unifies Access to Facebook, Instagram, and AI Devices with New Meta Account

Meta Unifies Access to Facebook, Instagram, and AI Devices with New Meta Account

Meta Unifies Access to Facebook, Instagram, and AI Devices with New Meta Account
Rapid Read Rapid Read
Surveillance Vendors Exploit Telecom Networks to Track Phone Locations, Citizen Lab Reports

Surveillance Vendors Exploit Telecom Networks to Track Phone Locations, Citizen Lab Reports

Citizen Lab, a digital rights organization, has uncovered two surveillance campaigns exploiting vulnerabilities in global telecom networks to track individuals' phone locations. These campaigns involve vendors operating as 'ghost' companies, pretending to be legitimate cellular providers to access telecom networks. They exploit the Signaling System 7 (SS7) protocol, which lacks authentication and encryption, allowing unauthorized access to track phone locations. The newer Diameter protocol, intended to replace SS7, also has vulnerabilities due to inconsistent implementation by telecom providers. The campaigns targeted high-profile individuals and used telecom providers like Israeli operator 019Mobile, British provider Tango Networks U.K., and Airtel Jersey. The report highlights the ongoing risks posed by these vulnerabilities, despite efforts to secure telecom networks.
Rapid Read Rapid Read
ProxySmart's SIM Farm-as-a-Service Operation Raises Cybersecurity Concerns

ProxySmart's SIM Farm-as-a-Service Operation Raises Cybersecurity Concerns

A Belarus-based software platform, ProxySmart, has been identified as a key player in an industrial-scale cybercrime operation involving 87 physical SIM farms globally. According to Infosecurity Magazine, ProxySmart provides a web-based control panel, API, and remote access that supports SIM farm-as-a-service. This service enables device management, customer provisioning, automated IP rotation, network fingerprint spoofing, and plan enforcement, while implementing countermeasures against bots. Researchers from Infrawatch have reported that this ecosystem significantly lowers the barrier for operating and reselling mobile proxy infrastructure, with minimal eligibility checks across many downstream providers. The use of carrier-grade NAT, rapid IP rotation, and multi-carrier availability complicates IP-centric controls and attribution at scale. However, ProxySmart disputes these findings, claiming their infrastructure supports legitimate activities such as advertising verification, brand protection, cybersec...
Rapid Read Rapid Read
Mastodon Faces DDoS Attack, Causing Service Disruptions

Mastodon Faces DDoS Attack, Causing Service Disruptions

Mastodon, a decentralized social networking software, experienced a distributed denial-of-service (DDoS) attack on its flagship server, mastodon.social, rendering the site unusable at times. The attack led to widespread inaccessibility, with users encountering error messages and outage warnings. Mastodon reported the incident early Monday morning and implemented countermeasures by 9:05 a.m. ET, restoring accessibility but warning of potential ongoing instability. This cyberattack follows a similar incident involving Bluesky, another decentralized social network, which faced a prolonged DDoS attack but has since stabilized. Mastodon has not disclosed the cause of the attack, and representatives have yet to comment further.
Trendline Trendline
Understanding Mobile Proxy Servers: Functionality and Benefits

Understanding Mobile Proxy Servers: Functionality and Benefits

Understanding Mobile Proxy Servers: Functionality and Benefits
Trendline Trendline
Vercel Confirms Security Breach Affecting Customer Data Through Context AI

Vercel Confirms Security Breach Affecting Customer Data Through Context AI

Vercel Confirms Security Breach Affecting Customer Data Through Context AI
Trendline Trendline
Lovable Faces Security Crisis with Exposed User Data and Vulnerabilities

Lovable Faces Security Crisis with Exposed User Data and Vulnerabilities

Lovable Faces Security Crisis with Exposed User Data and Vulnerabilities
Rapid Read Rapid Read
Fortinet's Next-Generation Firewalls Enhance Cybersecurity in K-12 Districts

Fortinet's Next-Generation Firewalls Enhance Cybersecurity in K-12 Districts

Fortinet, a leading cybersecurity company, is providing next-generation firewalls (NGFWs) to K-12 school districts to bolster their cybersecurity defenses. The East Noble School Corporation in Indiana, for example, adopted Fortinet's FortiGate NGFW to address rising security costs and enhance their network's security features. The FortiGate firewall offers advanced capabilities such as web filtering, intrusion prevention, and load balancing, which have significantly improved the district's ability to manage cyber threats like distributed denial-of-service (DDoS) attacks. The adoption of these firewalls has also streamlined network management, allowing for centralized control and reducing the need for physical interventions at campus locations. This move is part of a broader trend where schools are upgrading from legacy firewalls to NGFWs to meet the increasing demands of digital learning environments.
Rapid Read Rapid Read
Vulnerabilities in Serial-to-IP Converters Threaten OT and Healthcare Systems

Vulnerabilities in Serial-to-IP Converters Threaten OT and Healthcare Systems

Security researchers have identified critical vulnerabilities in serial-to-IP converters, which are used to connect legacy serial equipment to modern networks. These vulnerabilities, found in devices from manufacturers like Moxa and Lantronix, could allow attackers to execute remote code, inject commands, and disrupt services. The flaws, collectively known as BRIDGE:BREAK, pose significant risks to sectors such as healthcare and industrial operations, where these devices are prevalent.
Trendline Trendline
NymVPN Introduces Split-Tunneling and Post-Quantum Security for Windows Users

NymVPN Introduces Split-Tunneling and Post-Quantum Security for Windows Users

NymVPN Introduces Split-Tunneling and Post-Quantum Security for Windows Users