Anthropic-Themed Phishing Emails Bypass Top Security Tools
The gist: Obvious phishing emails with numerous red flags are somehow getting past some of the industry-leading secure email gateway (SEG) products.
The gist: Obvious phishing emails with numerous red flags are somehow getting past some of the industry-leading secure email gateway (SEG) products.
The gist: Researchers can't quite explain why cyber threats look so different in Italy compared to everywhere else.
The gist: Fixing the critical PHP flaws is not as simple as clicking "Update." Here's how to assess your risk, and what you can do to protect yourself.
The gist: Relatively small data breaches in India can turn quite serious, thanks to a sophisticated underground market for trading PII.
The gist: Des centaines de magasins ont subi des pertes se chiffrant en millions d'euros parce qu'ils avaient fait appel à des tiers pour gérer le micrologiciel OT obsolète qui pilotait leurs systèmes de climatisation.
The gist: Cloud providers may be storing sensitive customer data, without either party knowing it. But when a provider is breached, the data comes home to roost.
The gist: Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.
The gist: Don't buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.
The gist: Hundreds of stores lost millions of dollars because they hired third parties to manage the outdated OT firmware running their cooling systems.
The gist: Organizations are reporting that employees face threats to their families, stalking, physical violence, and abduction. But these alarming claims are hard to verify.
The gist: The Democratic People's Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through simple reply-baiting phishing attacks.
The gist: The attack on the British retailer shows that compromising a single identity can lead to much deeper penetration of the corporate network.
The gist: In the wake of an agentic attack against its own Medicare systems, Australia's government is feeling out what regulations might look like for frontier AI companies.
The gist: Patch middleware vulnerabilities now to avoid hardware-based MFA exploits in ultra-sensitive environments.
The gist: A trio of newly discovered backdoors walk and quack like legitimate edge solutions, so it's hard to tell they're not.
The gist: A year-old Chinese threat actor looks like a cybercrime gang, acts like a state-associated APT, and attacks organizations in unexpected places.
The gist: A purported ad-blocker exfiltrates reams of sensitive information, and benefits from having Google's stamp of approval despite researcher warnings.
The gist: Agentic AI can smuggle arbitrary instructions from the Web, across multiple apps, into trusted internal communications channels.
The gist: Even if the organization locks down employee accounts, forgotten and lost service accounts can still undo the organization's entire M365 environment.
The gist: AI apps that interpret external data (read: most AI apps) need exceptionally rigorous security filters, or attackers can take advantage.
The gist: AI-driven cyberattacks used to be exotic. Soon, it'll be odd if threat actors aren't using agents to do all of their bidding.
The gist: Amid the US and China's fight for eco-colonial influence in Latin America, a stealthy backdoor has taken flight.
The gist: Cybercriminals behind malicious email campaigns no longer have to compromise volume for credibility, or vice versa, thanks to AI.
The gist: Threat actors are leveraging Microsoft's Graph API to identify lucrative targets, then passing their access to extortion groups like ShinyHunters.
The gist: Starting Friday, businesses operating in the EU will have just 24 hours to notify the government any time they discover serious product security incidents.
The gist: Researchers and OpenAI disagree on whether the earlier incident involving DseWiki was a “hack” that the company did not disclose.
The gist: Threat actors behind the "Phantom Deal" campaign are studying companies in extreme detail, aiming to dupe midlevel employees into initiating large financial transfers.
The gist: Brazil's most sophisticated threat group is making light work of the country's financial systems, putting money directly into its own pocket.
The gist: The Hugging Face incident was bigger and worse than previously thought, with approximately 700 agents collaborating on a sophisticated, multistage attack.
The gist: An untold number of ZBT routers sold around the world as white-label products come with several implants built by the manufacturer.