HiddenLayer reveals infostealer malware in a Hugging Face repository This article has been indexed from www.infosecurity-magazine.com Read the original article: Malicious Hugging Face Repository Typosquats OpenAI
Category: www.infosecurity-magazine.com
South Staffordshire Water Fined £1m After Data Breach
The ICO has fined South Staffordshire Water nearly £1m for a series of data protection failings This article has been indexed from www.infosecurity-magazine.com Read the original article: South Staffordshire Water Fined £1m After Data Breach
TrickMo Variant Routes Android Trojan Traffic Through TON
ThreatFabric finds new TrickMo Android banking trojan variant routing C2 through The Open Network This article has been indexed from www.infosecurity-magazine.com Read the original article: TrickMo Variant Routes Android Trojan Traffic Through TON
Rushed Patches Follow Broken Embargo on New Linux Kernel Vulnerabilities
Two new high-severity vulnerabilities, dubbed ’Dirty Frag’ when chained, have been found in the Linux kernel, affecting most Linux distributions This article has been indexed from www.infosecurity-magazine.com Read the original article: Rushed Patches Follow Broken Embargo on New Linux Kernel…
Fake Claude Code Page Pushes PowerShell Stealer at Devs
Ontinue uncovers fake Claude Code installer pushing PowerShell stealer abusing Chrome’s IElevator2 This article has been indexed from www.infosecurity-magazine.com Read the original article: Fake Claude Code Page Pushes PowerShell Stealer at Devs
Hackers Observed Using AI to Develop Zero-Day for the First Time
Google Threat Intelligence Group details how cybercriminals attempted to launch a campaign based around an AI-developed Zero-Day targeting open-source software This article has been indexed from www.infosecurity-magazine.com Read the original article: Hackers Observed Using AI to Develop Zero-Day for the…
US: FCC Relaxes Foreign-Made Router Ban to Allow for Security Updates
The same extension applies to security updates shipped to US-based users of foreign-made drones This article has been indexed from www.infosecurity-magazine.com Read the original article: US: FCC Relaxes Foreign-Made Router Ban to Allow for Security Updates
ShinyHunters Escalates Canvas Extortion with School by School Ransom Campaign
ShinyHunters has escalated its Canvas extortion campaign, defacing hundreds of school login pages and threatening to leak stolen data unless institutions negotiate This article has been indexed from www.infosecurity-magazine.com Read the original article: ShinyHunters Escalates Canvas Extortion with School by…
Zara Data Breach Impacts Nearly 200,000 Customers
ShinyHunters gets away with emails and other data on 200,000 Zara customers This article has been indexed from www.infosecurity-magazine.com Read the original article: Zara Data Breach Impacts Nearly 200,000 Customers
Police Shut Relaunched Crimenetwork Dark Web Marketplace
Spanish police have arrested the suspected administrator of German dark web marketplace Crimenetwork This article has been indexed from www.infosecurity-magazine.com Read the original article: Police Shut Relaunched Crimenetwork Dark Web Marketplace
Australian Cyber Security Centre Issues Alert Over ClickFix Attacks
ACSC warns over a campaign targeting organizations which uses ClickFix to deliver Vidar infostealer malware This article has been indexed from www.infosecurity-magazine.com Read the original article: Australian Cyber Security Centre Issues Alert Over ClickFix Attacks
PCPJack Campaign Boots TeamPCP Off Compromised Machines
SentinelOne believes the PCPJack campaign may be the brainchild of a former TeamPCP member This article has been indexed from www.infosecurity-magazine.com Read the original article: PCPJack Campaign Boots TeamPCP Off Compromised Machines
Legacy Security Tools Are Failing Data Protection, Capital One Software Report Finds
Traditional network security tools are undermining data protection, with Forrester and Capital One Software research warning AI adoption is impossible without rethinking data security This article has been indexed from www.infosecurity-magazine.com Read the original article: Legacy Security Tools Are Failing…
Cline Kanban Flaw Lets Websites Hijack AI Coding Agents
Oasis Security finds critical Cline kanban WebSocket flaw exposing AI coding agents to hijack This article has been indexed from www.infosecurity-magazine.com Read the original article: Cline Kanban Flaw Lets Websites Hijack AI Coding Agents
OpenAI and Anthropic LLMs Used in Critical Infrastructure Cyber-Attack, Warns Dragos
Commercial AI models were used to help plan and conduct cyber-attack against operational technology of a water and drainage facility, say researchers This article has been indexed from www.infosecurity-magazine.com Read the original article: OpenAI and Anthropic LLMs Used in Critical…
Fake Claude AI Site Drops Beagle Backdoor on Windows Users
Sophos finds fake Claude site spreading DonutLoader and a new Beagle backdoor via DLL sideloading This article has been indexed from www.infosecurity-magazine.com Read the original article: Fake Claude AI Site Drops Beagle Backdoor on Windows Users
Daemon Tools Developer Confirms Software Was Trojanized
A China-linked threat actor backdoored a version of Daemon Tools to infect thousands This article has been indexed from www.infosecurity-magazine.com Read the original article: Daemon Tools Developer Confirms Software Was Trojanized
Researchers Spot Uptick in Use of Vercel for Phishing Campaigns
Cofense has warned of a “significant” increase in phishing campaigns abusing Vercel platform This article has been indexed from www.infosecurity-magazine.com Read the original article: Researchers Spot Uptick in Use of Vercel for Phishing Campaigns
CloudZ Malware Abuses Phone Link to Steal SMS OTPs
Cisco Talos uncovers CloudZ RAT and Pheno plugin abusing Microsoft Phone Link to intercept SMS OTPs This article has been indexed from www.infosecurity-magazine.com Read the original article: CloudZ Malware Abuses Phone Link to Steal SMS OTPs
CISA Urges Critical Infrastructure Providers to Make Plans to Remain Operational if hit by Cyber-Attack
CISA’s CI Fortify initiative aim for critical infrastructure operators to build isolation & recovery This article has been indexed from www.infosecurity-magazine.com Read the original article: CISA Urges Critical Infrastructure Providers to Make Plans to Remain Operational if hit by Cyber-Attack