Stolen Credentials: Why Attackers Skip Exploits
The cybersecurity industry has spent the last several years chasing sophisticated threats like zero-days, supply chain compromises, and AI-generated exploits. H
Cybersecurity
531 articles
Outlook.com Hit by Major Outage Blocking User Access
Microsoft is investigating an ongoing Outlook.com outage that is causing intermittent signing issues and preventing customers from accessing their mailboxes. [.
Hackers Exploit Meta's AI Bot to Breach High-Profile Instagram Accounts
The Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced with pro-Iranian images and messages
NGate Malware Evolves: Hijacks HandyPay App to Steal NFC Data
Cybersecurity researchers have discovered a new iteration of an Android malware family calledNGate that has been found to abuse a legitimate application called&
Itron Reports Unauthorized Access to Internal IT Systems
Itron, Inc. has disclosed, via an 8-K filing with the U.S. Securities and Exchange Commission (SEC), a cybersecurity incident in which an unauthorized third par
Google Fixes Critical Prompt Injection Flaw in Antigravity IDE
Cybersecurity researchers have discovered a vulnerability in Google's agentic integrated development environment (IDE), Antigravity, that could be exploited to
Microsoft Overhauls Windows Insider Program for Better Testing
Microsoft says it's rolling out a revamped Windows Insider Program experience as part of the broader plans to address performance and reliability concerns affec
CISA Adds 8 Critical Exploited Vulnerabilities to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog,
Microsoft Teams Exploited to Distribute Custom Snow Malware
A threat group tracked as UNC6692 uses social engineering to deploy a new, custom malware suite named 'Snow' which includes a browser extension, a tunneler, and
Critical SGLang Vulnerability Exposes Systems to Remote Code Execution
A critical security vulnerability has been disclosed in SGLang that, if successfully exploited, could result in remote code execution on susceptible systems. Th
ADT Confirms Data Breach Following ShinyHunters Extortion Threat
Home security giant ADT has confirmed a data breach after the ShinyHunters extortion group threatened to leak stolen data unless a ransom is paid. [...]
Attackers Exploit Trusted Tools to Breach Systems
Monday’s recap shows the same pattern in different places. A third-party tool becomes a way in, then leads to internal access. A trusted download path is briefl
BlackFile Extortion Group Escalates Vishing Campaign
A new financially motivated hacking group tracked as BlackFile has been linked to a wave of data theft and extortion attacks against retail and hospitality orga
Why AI Projects Fail After the Initial Demo Phase
The fastest way to fall in love with an AI tool is to watch the demo. Everything moves quickly. Prompts land cleanly. The system produces impressive outputs in
Firestarter Malware Persists Despite Cisco Security Patches
Cybersecurity agencies in the U.S. and U.K. are warning about a custom malware called Firestarter persisting on Cisco Firepower and Secure Firewall devices runn
ZionSiphon Malware Targets Israeli Water Infrastructure
Cybersecurity researchers have flagged a new malware called ZionSiphon that appears to be specifically designed to target Israeli water treatment and desalinati
Microsoft Enhances Windows Update with New Restart Controls
Microsoft is rolling out Windows Update improvements that give users more control over how updates are installed while reducing disruption from frequent or poor
Critical Design Flaw in Model Context Protocol Risks AI Supply Chain
Cybersecurity researchers have discovered a critical "by design" weakness in the Model Context Protocol's (MCP) architecture that could pave the way for remote
Microsoft Brings Passkey Authentication to Windows Entra
Microsoft will roll out passkey support for phishing-resistant passwordless authentication to Microsoft Entra‑protected resources from Windows devices starting
Vercel Confirms Breach Linked to Third-Party AI Tool
Web infrastructure provider Vercel has disclosed a security breach that allows bad actors to gain unauthorized access to "certain" internal Vercel systems. The
Critical Linux Vulnerability Allows Unauthorized Root Access
A new vulnerability dubbed Pack2TheRoot could be exploited in the PackageKit daemon to allow local Linux users to install or remove system packages and gain roo
Sanctioned Crypto Exchange Grinex Shuts Down After $13.74M Hack
Grinex, a Kyrgyzstan-incorporated cryptocurrency exchange sanctioned by the U.K. and the U.S. last year, said it's suspending operations after it blamed Western
DORA's Article 9: Why Credential Management Is Now EU Financial Law
Article 9 of DORA makes authentication and access control a legal obligation for EU financial entities. Here is what the regulation requires, and what a breach
Nexcorium Mirai Variant Targets DVRs in Growing Botnet Campaign
Threat actors are exploiting security flaws in TBK DVR and end‑of‑life (EoL) TP-Link Wi-Fi routers to deploy Mirai-botnet variants on compromised devices, accor
10,000+ Zimbra Servers Face Active XSS Attack Threat
Over 10,000 Zimbra Collaboration Suite (ZCS) instances exposed online are vulnerable to ongoing attacks exploiting a cross-site scripting (XSS) security flaw. [
Microsoft Defender Zero-Days Under Active Attack
Huntress is warning that threat actors are exploiting three recently disclosed security flaws in Microsoft Defender to gain elevated privileges in compromised s
Microsoft Gives Enterprise Admins Control Over Copilot Removal
Microsoft says IT administrators can now uninstall the AI-powered Copilot digital assistant from enterprise devices using a new policy setting, which has become
Google Blocks 8.3B Ads, Overhauls Android Privacy
Google this week announced a new set of Play policy updates to strengthen user privacy and protect businesses against fraud, even as it revealed it blocked or r
Critical WordPress Plugin Flaw Exposes Sites to File Upload Attacks
Hackers are actively exploiting a critical vulnerability in the Breeze Cache plugin for WordPress that allows uploading arbitrary files on the server without au
International Police Operation Dismantles 53 DDoS-for-Hire Domains
An international law enforcement operation has taken down 53 domains and arrested four people in connection with commercial distributed denial-of-service (DDoS)
Trigona Ransomware Gang Deploys Custom Tool for Rapid Data Theft
Recently observed Trigona ransomware attacks are using a custom, command-line tool to steal data from compromised environments faster and more efficiently. [...
NIST Restructures CVE Database After Vulnerability Submissions Skyrocket
The National Institute of Standards and Technology (NIST) has announced changes to the way it handles cybersecurity vulnerabilities and exposures (CVEs) listed
Bitwarden CLI Package Compromised in npm Supply Chain Attack
The Bitwarden CLI was briefly compromised after attackers uploaded a malicious @bitwarden/cli package to npm containing a credential-stealing payload capable of
Apache ActiveMQ Flaw Exploited in Wild, Added to CISA Watch List
A recently disclosed high-severity security flaw in Apache ActiveMQ Classic has come under active exploitation in the wild, per the U.S. Cybersecurity and
Checkmarx KICS Tool Compromised in Supply Chain Attack
Hackers have compromised Docker images, VSCode and Open VSX extensions for the Checkmarx KICS analysis tool to harvest sensitive data from developer environment
New PowMix Botnet Actively Targeting Czech Workers
Cybersecurity researchers have warned of an active malicious campaign that's targeting the workforce in the Czech Republic with a previously undocumented botnet
UK Cyber Officials Alert: Chinese Hackers Using Device Networks
The United Kingdom's National Cyber Security Centre (NCSC-UK) and international partners warned that China-nexus hackers are increasingly using large-scale prox
Cloud Breaches Tied to Orphaned Credentials: 2024 Data
In 2024, compromised service accounts and forgotten API keys were behind 68% of cloud breaches. Not phishing. Not weak passwords. Unmanaged non-human
Password Reset Requests: A Gateway for Attackers
Password resets are one of the easiest ways for attackers to bypass security controls. Specops Software shows how helpdesk social engineering turns a seemingly
Critical Security Threats Surge: Defender Flaw, Excel Exploit
You know that feeling when you open your feed on a Thursday morning and it's just... a lot? Yeah. This week delivered. We've got hackers getting creative in way
State-Backed Hackers Weaponize Outlook, Slack for Covert Attacks
A previously undocumented state-backed threat actor named GopherWhisper is using a Go-based custom toolkit and legitimate services like Microsoft 365 Outlook, S
New RAT Malware Targets Finance Sector via Obsidian
A "novel" social engineering campaign has been observed abusing Obsidian, a cross-platform note-taking application, as an initial access vector to distribute a
Rituals Cosmetics Confirms Customer Data Breach
Dutch cosmetics giant Rituals disclosed a data breach after attackers stole the personal information of an undisclosed number of customers from its "My Rituals"
Banking Sessions Hijacked: Taboola's Hidden Redirect to Temu
A bank approved a Taboola pixel. That pixel quietly redirected logged-in users to a Temu tracking endpoint. This occurred without the bank’s know
Microsoft Edge Update Blocks Teams Meeting Access for Windows
Microsoft confirmed that a recent Microsoft Edge browser update introduced a bug that prevents Windows users from joining Teams meetings. [...]
Cisco Patches Critical Flaws in Identity and Webex Services
Cisco has announced patches to address four critical security flaws impacting Identity Services and Webex Services that could result in arbitrary code execution
CISA Orders Federal Agencies to Patch Critical Microsoft Defender Flaw
CISA has ordered U.S. federal agencies to patch a Microsoft Defender privilege escalation flaw (dubbed BlueHammer) that has been exploited in zero-day attacks.
n8n Automation Platform Weaponized for Phishing Since October
Threat actors have been observed weaponizing n8n, a popular artificial intelligence (AI) workflow automation platform, to facilitate sophisticated phi
Apple Patches iOS Notification Storage Bug Across Devices
Apple has released out-of-band security updates for iPhone and iPad devices to fix a Notification Services flaw that could allow notifications marked for deleti
Critical nginx-ui Flaw Under Active Attack
A recently disclosed critical security flaw impacting nginx-ui, an open-source, web-based Nginx management tool, has come under active exploitation in the