Attack &amp; News

Threat Actor Uses AI to Build EDR Evasion Tools

A threat actor used AI coding tools to build and test EDR evasion malware, Sophos finds

Northern Ireland cops issue PSA after official phone number spoofed by scammers

If you’re going to impersonate an officer, perhaps choose a more sophisticated way to nick cash than asking for gift cards…

The Manhattan Institute Helped Kill DEI. Now It’s Coming for Protests

The right-wing think tank is actively pushing “civil terrorism”—increasing penalties for minor crimes committed while people engag…

Attackers Hijack Red Hat npm Scope to Steal Cloud Secrets

Attackers backdoored 32 packages in Red Hat's official npm scope to steal cloud and CI secrets

Infosecurity Europe: UK Firms Prioritize AI Threat Preparedness as Cyber Risks Evolve

UK organizations are prioritizing AI-driven cybersecurity as 43% cite AI-powered attacks as their top risk, prompting significant…

Infosecurity Europe: Business Leaders Lack Understanding of Threat Intelligence, Study Warns

A new Silobreaker and SANS Institute paper examines the ‘Intelligence-Stakeholder Gap’ and what organizations must do to achieve b…

Shai-Hulud malware worms Red Hat npm package versions downloaded 80K times a week

TeamPCP? Or copycat malware dev?

NEWShighKrebs on Security3 months ago

Election interlopers register 5K+ domains, hope to catch some voting phish

Hacking voting machines is so 2017. Phishing, impersonation pose the real election risks

Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts

The Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced with p…

NEWSSecurity Magazine3 months ago

The First World Cup in the Agentic Era

This year, the World Cup is facing a cyber threat that, historically, it hasn’t seen as often: malicious AI agents.

NEWSSecurity Magazine3 months ago

US Troops in Active War Zones Tracked with Commercial Location Data

Foreign adversaries are exploiting commercial location data to track U.S. servicemembers in active war zones.

NEWScriticalInfosecurity Magazine3 months ago

GTA cheat service Atlas Menu hacked as attacker alleges screenshot spying

A database containing 64,000 user records was published to GitHub after an attacker claimed to have compromised all Atlas systems

Critical Flowise Flaw Gives Attackers Full Server Control

Obsidian publishes PoC for a 1-click Flowise RCE that can fully compromise self-hosted servers

Infosecurity Europe: Tabletop Exercise to Test How CISOs Respond to Major Supermarket Cyber-Attack

Semperis is set to bring ‘Enter the War Room: A Tabletop Experience’ to Infosecurity Europe to help cybersecurity leaders prepare…

Palo Alto VPN bug graduates from advisory to active exploitation

Rapid7: Attackers exploit authentication bypass flaw in the wild, meaning more emergency patching for PAN-OS users

Infosecurity Europe: AI SOCs Will Still Need SOC Analysts, Security Vendors Say

Top cybersecurity vendors said AI won't replace entry-level – only routine ticket-taking and triage

Password manager Dashlane suspends customer accounts amid brute-force attacks

Engineers' weekends ruined as Dashlane's automatic protections kicked in

FSB Group Gamaredon Hides Worm in Windows Data Streams

FSB-linked Gamaredon concealed a fileless worm in NTFS data streams to spy on Ukraine targets

Putin sends submarines to survey Britain's subsea cables. UK deploys Royal Navy, mobilizes parliamentary draftsmen

Proposed legislation threatens fines and prison for reckless damage. Russian Prez must be shaking in his boots

NEWShighInfosecurity Magazine3 months ago

The Romance Scammer Who Made a Small Fortune Posing as a WWE Superstar

In this excerpt from WIRED Book Club pick The Yahoo Boys, journalist Carlos Barragán traces one scammer’s journey from flop to for…

Attackers Abuse Shared Content for ChatGPT Phishing Campaign

Push Security says threat actors are delivering malware hosted on chatgpt.com/s/ domain

NEWScriticalInfosecurity Magazine3 months ago

Websites Can Now Spy on You Through Your Hard Drive

Thanks to the newly detailed FROST technique, telltale SSD activity can be measured in the browser using simple JavaScript.

Palo Alto Warns High-Severity Bug Is Being Actively Exploited

A vulnerability in Palo Alto Networks’ PAN-OS software is being exploited in attacks

NEWShighWired Security3 months ago

Infosecurity Europe: OWASP Forms New Agentic Research Council

OWASP’s new Agentic Research Council will aim to connect academic work to operational realities on agentic AI security

Cybercrime Crew Claims It Hacked Mike Lindell’s MyPillow

Plus: A ransomware group is now stealing data in person, BusPatrol wants to hand its license plate surveillance data to the cops,…

Lone attacker published 14 malicious npm packages mimicking popular OpenSearch, Elasticsearch libraries

And then Microsoft busted them all

The White House’s Aliens.gov Site Brags That ICE Arrested More Than 700 US Citizens

The website, which compares human beings to extraterrestrials, touts arrest numbers from the Trump administration’s sweeping immig…