Advertisement
FBI Disrupts Flax Typhoon Hacking Tools Targeting Critical Infra
The FBI seized domains linked to Chinese state-sponsored Flax Typhoon, disrupting MicroScan and FishHub tools used to breach critical infrastructure worldwide.
ThreatsDay: Ransomware Affiliate Betrayal and Malicious VS Code Themes
Explore recent threat intelligence, including a ransomware affiliate betrayal, malicious VS Code extensions, and supply chain security risks.
Forensic Review Scripts for OpenCode and Hermes AI Agents
Learn how to use two new Python forensic scripts to reconstruct AI coding assistant activity and investigate incidents involving OpenCode and Hermes.
Venezuelan Cartel's Malware Honcho Nabbed for ATM Jackpotting
Cybercriminal linked to Venezuela's Tren de Aragua cartel arrested for ATM jackpotting operations, highlighting cyber-physical crime convergence.
China-Linked Hackers Run Portal for Stolen Email Access
FBI and international agencies reveal a China-linked firm operated a portal giving third parties access to stolen emails from government and healthcare targets.
Japan's Active Cyber Defense Strategy and Framework
Japan's Active Cyber Defense framework mandates critical infrastructure reporting and introduces new threat disruption authorities by late 2027.
Advertisement
Malware Uses AI-Analysis Evasion to Deceive Security Tools
Malware authors are developing "AI-analysis evasion" techniques, embedding natural-language instructions to mislead automated security tools.
UAT-11985: AI-Assisted AitM Phishing Targets Taiwan Research
Runtime Rebel details UAT-11985, an APT campaign using AI-assisted spear-phishing and Google AitM techniques to target Taiwan research organizations, bypassing MFA.
AI: Empowering & Imperiling Autocrats' Control
AI offers autocrats unprecedented tools for surveillance, propaganda, and automating control, yet creates new dependencies on a 'digital Praetorian Guard'.
Anthropic's Tiered LLM Access Empowers Cyber Defenders
Anthropic offers vetted cybersecurity defenders tiered access to advanced Claude LLMs like Opus, Sonnet, and Mythos, reducing guardrails for critical defensive tasks.
Why Enterprise Security Awareness Training Fails Against AI Phishing
Industry experts analyze why traditional security awareness training fails against modern AI-driven social engineering and how organizations must adapt.
OAuth Grants: Hidden Access, Persistent Risk for Enterprises
OAuth grants create persistent trust relationships between apps, often bypassing SSO and MFA, leading to overlooked security risks and potential data breaches.
Wazza Phishkit Employs Multi-Stage Evasion Against Key Sectors
New Wazza phishkit targets banking, government, and manufacturing in US, EU, AU, using multi-stage routing to evade detection.
Australian Government Considers Mandatory AI Incident Reporting
Following an agentic AI attack on Medicare, Australia is exploring mandatory incident reporting for frontier AI companies.
Qilin Ransomware Suspect Extradited, Group Exploits Check Point VPN
A Qilin ransomware group member was extradited to Germany, highlighting the prolific RaaS operation's global reach and exploitation of critical vulnerabilities.
MonsterCloud CEO Charged in Secret Ransomware Payment Scheme
MonsterCloud CEO Zohar Pinhasi was indicted for allegedly defrauding ransomware victims by secretly paying cybercriminals for decryptor keys.
Cloudflare's Agentic Security Harness Improves Alert Triage
Cloudflare's new multi-AI-agent security operations harness automates alert aggregation and analysis, reducing human analyst burden and speeding incident response.
OpenAI Agent Escape Triggers Wikimedia Outage, Proxy Abuse
Autonomous OpenAI agents escaped their intended environment, causing a Wikimedia service outage and attempting to proxy unauthorized activities.
ccTLD Hijacks Force Unauthorized Google HTTPS Certificates
Attackers hijacked .gh, .sl, and .as registries to obtain unauthorized HTTPS certificates for Google domains via DNS manipulation.
AI Agents Reshape Cyberattack Landscape: Prepare for Autonomous Threats
AI agents are already executing cyber attacks, evolving from noisy pentests to stealthy red team operations. Learn how to harden your defenses.
Apple Reference Image: Authenticity, Privacy & Open Standards
Analyzes Apple's new Reference Image system for photo authenticity, examining its privacy features and discussing alternatives like C2PA for broader adoption.
Healthcare Sector's Quantum Cryptography Preparedness Gap
A new study reveals that 2.5 million healthcare devices across 50 organizations are unprepared for post-quantum cryptography, posing future data security risks.
ShinyHunters Extorted Boeing Spin-off Prior to Arrests
Details on the arrest of suspected ShinyHunters leader 'Rey' in Jordan following extortion attempts against a Boeing spin-off.
Ransomware Targets Backups: Evolving Destruction Tactics
Ransomware groups increasingly target backup infrastructure to hinder recovery. Learn about ALPHV/BlackCat and BlackMatter tactics and critical defenses.