Cybersecurity News

International agencies issue joint alert over state-backed campaign exploiting a critical vulnerability in the Zimbra Collaboration Suite

CoreView research finds that security leadership is concerned about AI Assistant exposing confidential data

US government agencies have warned that Iranian cyber actors are targeting US-based Siemens and Schneider industrial equipment

Sophos report warns that the rapid adoption of AI by businesses is leaving them vulnerable to a new source of cyber threats

Core issues that slowed down adoption of secure data vaults are being resolved by technology, but artificial intelligence poses new ones. Experts have some answers.

Dolphin X is a new infostealer that uses AI to sort and rank victims, giving cybercriminals a faster way to identify lucrative targets

A new study of organizations which have fallen victim to ransomware suggests the rise of AI-tools being used by hackers is making life harder for defenders

Portuguese businesses operate in the same native language as Brazilian hackers, making those businesses easy targets.

A cyberattack on a food and logistics firm disrupts the supply of frozen food to thousands of clients, including major franchises like Kentucky Fried Chicken.

Ahead of Black Hat USA, researchers find exploitable flaws in how Microsoft handles passkeys that could allow attackers to impersonate privileged users.

Sandworm_Mode is an early example of malware that exploits trusted AI tools and workflows to make malicious activity virtually indistinguishable from normal activity.

A malicious application delivers four-stage Android spyware via phony Google Play sites, exploiting civilian fear during Iranian missile strikes.

Advanced LLMs escaped their sandboxes while attempting to achieve a non-malicious benchmark test objective.

New TrickBot variant hides C2 communication inside DNS queries, replacing decade-old HTTP pattern

Hugging Face recently disclosed a security breach. OpenAI has now said that it was its AI models which broke containment and hacked Hugging Face themselves

European and US banks inadvertently transmitted customer data to ad platforms via tracking pixels, raising serious compliance, security, and privacy concerns.

New Ubuntu snap-confine race condition lets local users escalate to root on default installs

CodeMender actively builds and runs exploits in customer-managed sandboxes to verify if vulnerabilities are truly exploitable

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one's television into an always-on residential proxy node. The move comes less than a month after researchers found that more than 42 percent of games and other apps available for download on LG's webOS store allow unknown third-parties to route their Internet traffic through a user's TV.

Russian-speaking actor Trim built a commercial offensive AI pentest tool on jailbroken Claude models

Analysis by Black Kite warns that ransomware ecosystem is becoming bigger and more fragmented

FBI warned of deepfake videos of IC3 leadership directing users to spoofed complaint sites

Craneware, a provider of financial software for US healthcare organizations, has disclosed a cyber incident involving unauthorized access and data theft

In a new campaign, North Korean hacking group Famous Chollima targeted crypto professionals through ClickFix lures to deliver Windows and macOS trojans

Cruciferra crypter used process ghosting and 90 custom ciphers to hide payloads for multiple actors

JadePuffer follow-up campaign deployed ENCFORGE locker built to destroy AI model artifacts

A researcher who discovered a critical vulnerability in WordPress has used OpenAI’s latest model to develop an exploit chain

Researchers have linked HollowGraph malware to the Cavern framework after discovering its use of Microsoft 365 calendars and Microsoft Graph APIs as a stealthy C2 channel

Two chiefs of UK policing agencies said the Transport for London prosecution demonstrates the need for Cybercrime Risk Orders

Government organizations are targeted by attackers who know agencies cannot afford disruption to public services