Techniques included laptop infections, compromised internal tooling, and fake job interviews.
Tag: EN
Phone return scams: where a real delivery and a fake return end up in a bill for you
Phone return scams are part of a very convincing social engineering method where the criminals gets a phone and you get billed.
mSecure password manager hack prompts password reset warnings
mSeven Software is warning current and former mSecure password manager customers to change passwords, reset two-factor authentication, and remove passkeys…
How Governments Detect VPN Traffic, and Why Encryption Alone Doesn’t Hide It
Learn how governments detect VPN traffic using IP addresses, protocol fingerprints and active probing, and why encryption alone cannot prevent blocking.
US gov IT worker pleads guilty to sending Top Secret files to Ethiopia
Help desk technician agrees to minimum 10-year jail term after being caught copying files for more than 2 years
MariaDB enhances agent development for its next-gen database platform
MariaDB on Wednesday said it was adding four new agent-focused capabilities to Enterprise Platform 2027, the latest version of its enterprise database…
NIKKE PC launcher compromise put players’ passwords and personal files at risk
Players of Goddess of Victory: NIKKE are being urged to check their PCs after attackers tampered with files used by the game’s Windows launcher.
Feds warn grocers: Don’t chill on cyber defenses as freezer hacking spree heats up
No documented attacks against American supermarkets…yet
How Microsoft Edge Scareware Blocker Stops Malicious Notification Scams
HOC Shorts | Cybercriminals have weaponized native browser push notifications, tricking users into clicking “Allow” under fake “prove…
Queens Public Library says ransomware attack disrupted Wi-Fi, on-site computers
The library system, which has 66 branches serving the borough’s 2.3 million residents, published multiple alerts on Wednesday confirming that the…
Incidents Move Too Fast for Pen & Paper
Organizations may not be ready for completely autonomous communication processes, but there are places where automating information updates would…
US Government Email Systems Open to Abuse Thanks to Typos
Erroneous or outdated DNS records can give attackers surprising powers over organizations’ email systems.
Scammers use AI-generated images of missing pets to extort owners
Scammers are using AI images to enhance their “I’ve found your missing pet and want money to return it to you” schemes.
Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts
Hackers are using fake OpenAI, SpaceX, and Anthropic event invitations to lure employees into phishing attacks, using two different phishing-as-a-service…
Artificial intelligence and cyber intrusion
An NCSC assessment that examines current AI-enabled threat trends and projections of the threat landscape to 2028.
Google Calendar phishing campaign hijacks sessions, bypasses MFA
A phishing campaign used Google Calendar invites, trusted redirects, and fake login pages to hijack corporate Google sessions and bypass MFA protections.…
Researchers Bypass ChatGPT Lockdown Mode to Exfiltrate Chats Without User Interaction
Cybersecurity researchers have disclosed details of a now-patched vulnerability that could be exploited to bypass Lockdown Mode protections in OpenAI…
What We Missed: Knicks Phishing Test Goes Out of Bounds
In this video conversation, Dark Reading editors discuss some of the news they didn’t get a chance to cover, from an ill-conceived phishing simulation to…
OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux
Attackers can log in to accounts that have no password, such as SSH key-only accounts, on some Alpine Linux servers running the standard openssh-server…
Nearly 1.5 million exposed secrets targeted in new revocation program
Truffle Security has launched the Secrets Revocation Program, a free initiative that helps API key issuers revoke 1.4 million publicly exposed secrets…