Advertisement
IRS Phishing Campaign Targets 29,000 Users with RMM Malware
Microsoft warns of a widespread IRS phishing campaign targeting 29,000 users with tax-themed lures to deploy RMM malware and steal enterprise credentials.
Azure Monitor Alert Abuse: Detecting Callback Phishing Campaigns
Threat actors are abusing Microsoft Azure Monitor Action Groups to send legitimate-looking callback phishing emails to bypass traditional security filters.
Google Play Protect Advanced Flow for Android Sideloading
Google introduces Advanced Flow to Play Protect, enhancing security for Android sideloading to combat financial fraud and malicious APK installations.
Russian Intelligence Phishing Targets Signal and WhatsApp Users
The FBI warns of sophisticated phishing campaigns by Russian intelligence targeting Signal and WhatsApp users to harvest credentials and bypass encryption.
Tycoon2FA PaaS Persists: 2FA Bypass & Mitigation Strategies
Runtime Rebel analyzes Tycoon2FA, a persistent Phishing-as-a-Service platform actively bypassing 2FA. Learn its implications and essential mitigation steps.
Russian Intelligence Targets Commercial Messaging App Accounts
Russian intelligence services are exploiting commercial messaging applications through phishing to compromise accounts of U.S. government officials, military, and…
Beast Gang OpSec Fail: Ransomware Server Exposes TTPs
Beast Gang's OpSec failure exposes their cloud ransomware server, revealing aggressive tactics against network backups. Defenders gain insight into their TTPs.
Operation Alice Disrupts 373,000 Dark Web Fake CSAM Sites
International law enforcement's Operation Alice has shut down over 373,000 dark web sites offering fake CSAM, impacting criminal infrastructure.
Interlock Ransomware Targets Cisco Firewalls via CVE-2024-20481
Interlock ransomware operators exploited a critical Cisco ASA vulnerability before public disclosure. Learn how to detect and mitigate these targeted attacks.
Smuggling of AI Servers to China: DOJ Indicts Three for Export Violations
Three California residents face charges for allegedly conspiring to smuggle restricted high-performance AI servers to China through deceptive front companies.
Android Security Safeguards and UK Cyber Reporting Mandates
Analysis of new Android live threat detection features, the Operation Alice takedown, and updated UK cybersecurity reporting regulations for 2024.
Mitigating Geopolitical Cyber Threats and Wiper Malware Impacts
Analysis of how geopolitical tensions drive destructive cyberattacks and technical strategies for CISOs to contain lateral movement and build resilience.
Cape Secures $100M to Mitigate Cellular Tracking and Metadata Risks
Cape raises $100 million to build a privacy-first MVNO, addressing critical cellular network vulnerabilities like IMSI catching and location tracking.
AI-Generated Music Fraud: How Bots Siphoned $10M in Royalties
A North Carolina musician pleaded guilty to a $10M fraud scheme using AI bots and automated streaming accounts to exploit major digital music platforms.
How Behavioral Analytics Counters AI-Enabled Phishing and Malware
Discover how AI-driven attacks like deepfakes and automated phishing evade legacy security and why behavioral analytics is essential for modern threat detection.
Google Android Security: 24-Hour Wait for Unverified Sideloading
Google introduces a mandatory 24-hour cooling-off period for sideloading unverified Android applications to mitigate malware and financial scams.
Aisuru and Kimwolf DDoS Botnets Disrupted in International Takedown
International law enforcement agencies have disrupted the infrastructure of the Aisuru, Kimwolf, JackSkid, and Mossad botnets, reducing global DDoS risks.
Global Law Enforcement Action Disrupts Major IoT DDoS Botnets
Authorities from the US, Germany, and Canada dismantled C2 infrastructure for the Aisuru, KimWolf, JackSkid, and Mossad botnets used in global DDoS attacks.
Apple Warns of Coruna and DarkSword Exploit Kits Targeting iOS
Apple warns of Coruna and DarkSword exploit kits targeting older iOS versions via malicious web content to steal sensitive data. Update your devices now.
DoJ Disrupts 3 Million-Device Botnets Behind 31.4 Tbps DDoS Attacks
The DoJ disrupted C2 infrastructure for major IoT botnets AISURU and Kimwolf, which were responsible for record-breaking 31.4 Tbps DDoS attacks.
DOJ Disrupts Aisuru, Kimwolf, JackSkid, and Mossad IoT Botnets
Federal authorities dismantle infrastructure for four major IoT botnets controlling 3 million devices used in record-breaking DDoS attacks worldwide.
Securing AI Agents: Threats & Defenses with Falcon AIDR, NeMo Guardrails
Explore threats to AI agents like prompt injection and data poisoning. Learn how CrowdStrike Falcon AIDR and NVIDIA NeMo Guardrails defend against AI-specific attacks.
Architectural Security Risks of MCP in LLM Environments
Explore architectural security risks introduced by MCP in Large Language Model environments, deemed unpatchable and requiring fundamental redesigns for future safety.
1stProtect's Behavioral Endpoint Security Emerges
1stProtect launches with $20M funding, offering an endpoint security platform that uses behavioral monitoring and user intent verification to stop real-time cyberattacks.