Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Web Scraping in 2025: Balancing Data Collection and Cybersecurity

In the era of data-driven decision-making, web scraping has become an indispensable tool for businesses, researchers, and analysts. From competitive intelligence and sentiment analysis to price monitoring and market research, automated data collection enables organizations to stay ahead. Yet, as its popularity grows, so do the security, legal, and ethical considerations surrounding it.

Pump-and-Dump or Legit Asset? Security Red Flags in Meme Coin Projects

Meme coins often make headlines for their wild price swings and colourful communities. Dogecoin, once a joke, has grown into a multi-billion-dollar token backed by celebrities and a loyal fan base. But for every Dogecoin, there are dozens of projects that vanish as quickly as they appear, leaving buyers empty-handed. The difference between a lighthearted experiment with staying power and a pump-and-dump scheme often lies in a few key details. Investors who learn to spot red flags can avoid being trapped in hype-driven frauds while still enjoying the fun side of crypto culture.

Meet Scattered Spider: The Group Currently Scattering UK Retail Organizations

First published May 8th 2025 Updated Sept 16th 2025 Editor’s Note: This blog builds on our recent analysis of the DragonForce ransomware cartel, which claimed responsibility for a wave of UK retail attacks in April–May 2025. While DragonForce took credit for the extortion and data leak phase, growing evidence suggests that another group—Scattered Spider—may have played a foundational role in enabling those attacks.

Read the SASE reviews, then read between the lines.

Every single-vendor SASE provider claims convergence, cloud-native design, advanced security, Zero Trust, and AI readiness. That’s the baseline. What enterprises need to know is how those claims hold up after deployment. Most head to Gartner Peer Insights as part of their recon because real-world feedback is the best reality check. Gartner is arguably the most recognized analyst in tech, trusted by thousands of organizations for impartial, considered research.

Wormable Malware Causing Supply Chain Compromise of npm Code Packages

On September 15, 2025, reports surfaced that the widely used npm package @ctrl/tinycolor had been compromised by malware as part of a broader supply chain attack affecting over 40 packages initially, with the number rising to more than 180 according to Aikido’s blog. Upon further investigation, the first malicious package that was identified as compromised in this campaign was rxnt-authentication, which was updated on September 14, 2025, at 17:58:50 UTC.

Linux Version 6.17 - Pre-Release Preview from a Security Perspective

Linux kernel v6.17 is on the horizon (expected release by the end of September 2025 – Canonical said to release 25.10 with the new kernel in early October), and it brings some interesting security-focused improvements. This release continues Linux’s trend of hardening the kernel against both hardware-level vulnerabilities and general attack vectors, while refining security subsystems for better performance and maintainability.

Automate Network Intelligence with the Forward Networks API

The Forward Networks platform creates a complete digital twin of your network—but the power of that data multiplies when it’s accessible via API. Whether you’re pushing insights into dashboards, validating changes before rollout, or automating ticket generation, the API puts your network state into your workflows.

Chaotic Deputy: Critical vulnerabilities in Chaos Mesh lead to Kubernetes cluster takeover

JFrog Security Research recently discovered and disclosed multiple CVEs in the highly popular Chaos engineering platform – Chaos-Mesh. The discovered CVEs, which we’ve named Chaotic Deputy are CVE-2025-59358, CVE-2025-59360, CVE-2025-59361 and CVE-2025-59359. The last three Chaotic Deputy CVEs are critical severity (CVSS 9.8) vulnerabilities which can be easily exploited by in-cluster attackers to run arbitrary code on any pod in the cluster, even in the default configuration of Chaos-Mesh.

Spotting Scams and Phishing in Under 60 Seconds: A Simple Checklist Anyone Can Use

Scams are getting slick, but your best defense is still fast, calm thinking. In one minute, you can scan any email, text, or DM and decide if it’s safe. Use the checklist below, then save the quick steps for what to do if you already clicked.