The well-known group of cybercriminals called Scattered Lapsus$ Hunters released a surprising farewell statement on BreachForums. This manifesto, a mix of confession and strategic deception, offers vital insights into the changing landscape of modern cybercrime and the increasing pressure from…
Google’s quantum computer creates exotic state once thought impossible
Physicists have achieved a breakthrough by using a 58-qubit quantum computer to create and observe a long-theorized but never-before-seen quantum phase of matter: a Floquet topologically ordered state. By harnessing rhythmic driving in these quantum systems, the team imaged particle…
Safer Conversational AI for Cybersecurity: The BIX Approach
Here’s a scenario security teams increasingly face. A user—or an attacker pretending to be one—types something like: This is how many prompt injection attempts begin. The phrase looks harmless, but it’s a red flag: the user is telling the AI…
IT Security News Hourly Summary 2025-09-13 03h : 3 posts
3 posts were published in the last hour 1:4 : A Cyberattack Victim Notification Framework 0:33 : RegTech at Scale: Winning the 2025 Compliance Race Without Blowing the Budget 0:33 : Week in Review: Qantas penalizes executives, UK cyberlegislation delayed,…
I tried Apple’s 2 big AI features announced at the iPhone 17 event – and both are game changers
Apple focused on its cutting edge hardware for the iPhone 17 launch, but also unveiled a couple groundbreaking AI features. Both could make a big difference in daily use. This article has been indexed from Latest news Read the original…
A Cyberattack Victim Notification Framework
Interesting analysis: When cyber incidents occur, victims should be notified in a timely manner so they have the opportunity to assess and remediate any harm. However, providing notifications has proven a challenge across industry. When making notifications, companies often do…
RegTech at Scale: Winning the 2025 Compliance Race Without Blowing the Budget
2025 is not a gentle jog. It is a full throttle compliance race and the pace car is artificial intelligence. Regulators across industries are rewriting…Read More The post RegTech at Scale: Winning the 2025 Compliance Race Without Blowing the Budget…
Week in Review: Qantas penalizes executives, UK cyberlegislation delayed, SonicWall VPN flaws
Link to episode page This week’s Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guests Rob Teel, CTO, Oklahoma Department of Commerce and Howard Holton, CEO, GigaOm Thanks to our show sponsor, Vanta Do you…
HybridPetya: More proof that Secure Boot bypasses are not just an urban legend
Although it hasn’t been seen in the wild yet A new ransomware strain dubbed HybridPetya was able to exploit a patched vulnerability to bypass Unified Extensible Firmware Interface (UEFI) Secure Boot on unrevoked Windows systems, making it the fourth publicly…
Trusted Connections, Hidden Risks: Token Management in the Third-Party Supply Chain
Effective OAuth token management is crucial for supply chain security, preventing breaches caused by dormant integrations, insecure storage or lack of rotation. The post Trusted Connections, Hidden Risks: Token Management in the Third-Party Supply Chain appeared first on Unit 42.…
New Windows 11 Flaw Slips In Through Old Patch
A Microsoft fix introduced CVE-2025-53136, leaking kernel addresses in Windows 11/Server 2022. Learn risks and how to stay protected. The post New Windows 11 Flaw Slips In Through Old Patch appeared first on eSecurity Planet. This article has been indexed…
Operation Eastwood: Measuring the Real Impact on NoName057(16)
Introduction On July 16, 2025, Europol revealed the details of Operation Eastwood, a coordinated international strike against one of the most active pro-Russian cybercrime groups, NoName057(016). The announcement promised a major disruption to the group’s activities. In this blog, we…
IT Security News Hourly Summary 2025-09-13 00h : 18 posts
18 posts were published in the last hour 21:38 : Data Is the New Diamond: Latest Moves by Hackers and Defenders 21:38 : AdaptixC2: A New Open-Source Framework Leveraged in Real-World Attacks 21:38 : ChatGPT just saved me 25% off…
Data Is the New Diamond: Latest Moves by Hackers and Defenders
Unit 42 delves into how cybercriminals are treating stolen data like digital diamonds amid rising attacks and evolving extortion tactics. The post Data Is the New Diamond: Latest Moves by Hackers and Defenders appeared first on Unit 42. This article…
AdaptixC2: A New Open-Source Framework Leveraged in Real-World Attacks
AdaptixC2, an open-source C2 framework, is increasingly used in attacks. We discuss its features and potential use case scenarios. The post AdaptixC2: A New Open-Source Framework Leveraged in Real-World Attacks appeared first on Unit 42. This article has been indexed…
ChatGPT just saved me 25% off my dinner tonight – here’s how
You can use free ChatGPT or ChatGPT Plus to look for copuon codes. But one trick gets the best results. This article has been indexed from Latest news Read the original article: ChatGPT just saved me 25% off my dinner…
The Hidden Threat: How Sensitive Information Leakage Puts Your Business at Risk
You Don’t Know What You Don’t Know – And That’s the Problem Picture this: Your development team has built a robust e-commerce platform. Your security team has implemented comprehensive protection measures. Your compliance team has checked all the boxes. Yet…
Enhancing AI Privacy: Federated Learning and Differential Privacy in Machine Learning
Privacy-preserving techniques are keeping your data safe in the age of AI. In particular, federated learning (FL) keeps data local, while differential privacy (DP) strengthens individual privacy. In this article, we will discuss challenges associated with this, practical tools, and…
This ‘critical’ Cursor security flaw could expose your code to malware – how to fix it
A feature being disabled by default could leave users and their organizations vulnerable to commands that run automatically. This article has been indexed from Latest news Read the original article: This ‘critical’ Cursor security flaw could expose your code to…
Your Powerbeats Pro 2 are getting a serious upgrade – but there’s a catch
Apple says it’s improved heart rate tracking features with Beats, which is great news for iPhone users, and not so much for Android fans. This article has been indexed from Latest news Read the original article: Your Powerbeats Pro 2…
FTC scrutinizes OpenAI, Meta, and others on AI companion safety for kids
Seven tech companies are under investigation, following recent reports of AI companions behaving badly. Here’s why. This article has been indexed from Latest news Read the original article: FTC scrutinizes OpenAI, Meta, and others on AI companion safety for kids
News brief: Salesloft Drift breach update and timeline
<p>Additional information has surfaced and new victims have come forward in the Salesloft Drift breach, which has affected more than 700 organizations globally.</p> <div class=”ad-wrapper ad-embedded”> <div id=”halfpage” class=”ad ad-hp”> <script>GPT.display(‘halfpage’)</script> </div> <div id=”mu-1″ class=”ad ad-mu”> <script>GPT.display(‘mu-1’)</script> </div> </div> <p>Salesloft…
AI-powered Pentesting Tool ‘Villager’ Combines Kali Linux Tools with DeepSeek AI for Automated Attacks
New AI-powered penetration testing framework Villager combines Kali Linux toolsets with DeepSeek AI models to fully automate cyber attack workflows. Initially developed by the Chinese-based group Cyberspike, this tool has rapidly gained traction since its July 2025 release on the…
Sidewinder Hacker Group Weaponizing LNK File to Execute Malicious Scripts
The notorious APT-C-24 threat actor group, commonly known as Sidewinder or Rattlesnake, has evolved its attack methodology by deploying sophisticated LNK file-based phishing campaigns targeting government, energy, military, and mining sectors across South Asia. Active since 2012, this advanced persistent…