Featured Story
Major password managers can leak logins in clickjacking attacks
Six major password managers are vulnerable to clickjacking attacks that could allow attackers to steal credentials, 2FA codes, and credit card details.
Attackers overlay invisible elements over password manager interfaces on malicious websites, tricking users into triggering autofill actions.
Currently affected: 1Password, Bitwarden, Enpass, iCloud Passwords, LastPass, and LogMeOnce, affecting around 40 million users. Some vendors like 1Password and LastPass have dismissed the findings.
Other Stories
Orange Data Breach Raises SIM-Swapping Attack Fears
Orange Belgium suffered a data breach affecting 850,000 customers, with attackers accessing SIM card numbers, PUK codes, names, and phone numbers. The Warlock ransomware group claimed responsibility.
No passwords, emails, or financial data were compromised, but the exposed data enables potential SIM swapping attacks.
CVE-2025-43300: Zero-Day in iOS, iPadOS, and macOS Under Active Exploitation
A zero-day vulnerability in Apple’s ImageIO framework (CVE-2025-43300) is under active exploitation, allowing memory corruption through malicious images. Apple patched the flaw across iOS, iPadOS, and macOS platforms.
The attacks are believed to target specific individuals using highly sophisticated techniques.
Windows 10 updates will soon stop: how can you remain safe on the internet?
On October 14, 2025, Microsoft will stop providing security updates for Windows 10. The system will continue to function, but it will no longer receive safety patches, leaving users vulnerable.
Around 43% of Windows PCs in Belgium still run Windows 10. Microsoft offers an Extended Security Updates (ESU) program, but it’s a temporary solution.
