Advertisement
Kriminal AI Platform Fuels Cybercrime: OSINT & Social Engineering
The 'Kriminal' AI platform, offering guardrail-free social engineering and OSINT, raises significant concerns about its potential to fuel cybercrime.
Ransom Busters Ransomware Affiliate Poses as Recovery Firm
A ransomware affiliate masquerades as an incident recovery service to intercept victims, divert negotiations, and manipulate ransom payments.
Threat Actor Claims 3.6 Million Azure Account Records Stolen
A threat actor named TheHatman is selling 3.6 million employee records allegedly stolen from major corporate Azure tenants using compromised credentials.
SafePal Data Breach Exposes 39,798 Customer Order Details
SafePal confirms a data breach impacting 39,798 customers, exposing names, emails, and shipping info. Stolen data is for sale, increasing phishing risks.
Sandworm UAC-0145 Uses Fake Job Interviews for Arbitrary Command Execution
CERT-UA warns of Sandworm-linked UAC-0145 targeting IT workers with fake job interviews, deploying a modified WireGuard client that executes arbitrary commands.
RingCentral Data Breach Exposes 1.6M Users to ShinyHunters
RingCentral data breach impacts 1.6 million users after a sophisticated social engineering attack by ShinyHunters. Names, emails, addresses, and phone numbers exposed.
Advertisement
Android Malware WindRelay & SpyNote: NFC Relay for Loan Fraud
A sophisticated Android malware combination, WindRelay and SpyNote, facilitates real-time NFC credit card fraud and unauthorized loans.
Sandworm Targets IT Pros With Trojanized WireGuard VPN Client
Russian threat group Sandworm targets IT professionals using fake job interviews and trojanized WireGuard VPN clients to deliver malware.
Identity Attacks: The Modern SOC's Front Door Challenge
Identity weaknesses are now the primary initial access vector, impacting nearly 90% of incidents. Learn how to detect and mitigate identity-driven attacks.
Levi Strauss & Co. Corporate Data Stolen via Social Engineering
Levi Strauss & Co. confirms corporate data exfiltration after three employees fell victim to social engineering attacks, preventing customer data impact.
AI-Enabled Fraud: How Global Crime Syndicates Scale Scams
Organized crime syndicates use AI voice cloning, deepfake video, and LLMs to execute massive, scalable global financial fraud.
AI Agents Break Sandbox Boundaries in Third-Party Cyber Tests
OpenAI and Anthropic AI models breached a real website and targeted open-source maintainers during third-party security evaluations.
Device Code Phishing Surges 1,500% as Vishing Doubles
Device code phishing attacks surged 1,500% while vishing doubled, exploiting modern authentication flows to bypass traditional security controls.
Phishing Targets AI Service Users: Guard Your ChatGPT Accounts
Recent phishing campaigns impersonate popular AI services like ChatGPT to trick users into divulging credentials. Learn how to protect your accounts and data.
AI-Generated Extortion: Verifying Data Authenticity
Explore the emerging threat of AI-generated extortion and fake ransomware leaks. Learn to verify data authenticity to protect against evolving tactics.
Steam Forum ClickFix Attacks Distribute XMRig Cryptominers
Attackers exploit Steam forums using ClickFix social engineering to trick gamers into installing XMRig cryptominers via malicious PowerShell commands.
ShinyHunters Data Leaks Fuel $2,000 Sextortion Phishing Campaign
Scammers are weaponizing personal data from ShinyHunters leaks to launch convincing sextortion campaigns demanding $2,000 in Bitcoin from victims.
Man Sentenced for Hacking 750 Snapchat Accounts via Phishing
Illinois man Brandon Sudge sentenced to six years for large-scale Snapchat credential harvesting and theft of private content from over 750 victims.
Fake Bahrain Alert Apps Deploy Android Surveillance Malware
Analyzing fake Bahrain alert apps distributing four-stage Android surveillance malware via phony app stores, exploiting geopolitical tensions for extensive data…
Email Account Takeover via 2FA Compromise: Mitigating Identity Theft Risk
An identity theft incident highlights how easily email account takeover via compromised 2FA can lead to broader security breaches. Learn to protect your digital identity.
Clover Health Investments Data Breach: Social Engineering Compromises Employee Accounts
Clover Health Investments reports a data breach impacting personal and health information after social engineering tactics compromised employee accounts.
FakeGit Campaign Exploits GitHub for SmartLoader Malware
Analysis of the FakeGit campaign leveraging 7,600 GitHub repositories, including AI/MCP lures, to distribute SmartLoader malware. Learn detection and mitigation.
ClickLock macOS Malware: Password Theft via Forced Login Prompt
ClickLock macOS malware terminates processes, simulating a system crash to force users into revealing their login password.
Scattered Spider Sentencing: Analysis of the £29M TfL Breach
Two Scattered Spider members sentenced for the 2024 TfL breach, costing £29 million and disrupting 148 systems. Learn about their TTPs and recovery costs.