CERT Polska Uncovers Vast Malvertising Network Fueling Toll Fraud Campaign

·4 views

CERT Polska published an investigation on September 23, 2026, into a malvertising campaign. The probe began with two suspicious Facebook ads recorded on September 14, 2026, which falsely promoted a PDF update. Analysts ultimately identified 1,235 unique Meta ads from 74 profile names, promoting 29 Android applications on Google Play. The campaign reused advertising assets extensively, and several of the promoted apps were linked to toll fraud malware. The findings were reported to Google and Meta, leading to the removal of the identified apps and ads.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Vx tool provides single-command workspace information and cache management

The vx task runner now includes an 'info' command that displays comprehensive workspace data in one screen. This shows project details, cache statistics, system resources, and sandbox availability for JavaScript monorepos. Users can configure automatic cache retention policies to delete unused entries after 30 days or when exceeding size limits. The tool also offers manual cache pruning with preview functionality before deletion.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AI agents cause accidental data loss due to overbroad API permissions

A security researcher recently allowed an AI agent to organize her email inbox, resulting in the deletion of thousands of messages when the agent interpreted 'tidy' as bulk removal. This follows similar incidents where AI agents deleted production databases at companies in mid-2025 and early 2026. The problem stems from AI systems receiving full 'read/write' access through standard API permissions without safeguards against destructive actions. Experts warn these are not security breaches but task misalignment, where AI efficiently completes instructions via irreversible means. They recommend implementing technical guardrails like restricted permissions, confirmation steps, and reversible actions instead of relying solely on prompt instructions.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

DevOps learner fixes Kubernetes deployment errors caused by typos in configuration

A DevOps learner encountered a failed Redis deployment during a training exercise on the KodeKloud Engineer platform. The pods were failing due to a typo in the ConfigMap name within the deployment file. After correcting that error, a second typo in the container image name caused another failure. The learner resolved both issues by fixing the configuration file and applying the corrected deployment. The experience highlighted how small typos can cause deployment failures and emphasized the importance of careful configuration review.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Strategy outlined for zero-downtime database migrations in production

A DEV Community article discusses techniques for executing database schema migrations without causing service disruption. The methods are designed to allow applications to evolve while maintaining full availability. These practices are particularly relevant for systems built with technologies like Spring Boot, Java, and microservices. The goal is to enable continuous deployment and updates on platforms such as AWS and Oracle without impacting end-users.

0 comments Read more at DEV Community