A sophisticated phishing campaign leveraging shared infrastructure between two prominent cybercriminal operations has emerged as a significant threat to Office 365 users worldwide. The Tycoon2FA Phishing-as-a-Service platform, which has been active since August 2023, has established operational connections with the…
Tag: EN
Beware of Weaponized AI Tool Installers That Infect Your Devices With Ransomware
Cybercriminals are increasingly exploiting the growing popularity of artificial intelligence tools by distributing sophisticated malware disguised as legitimate AI solution installers. This emerging threat landscape has seen malicious actors create convincing replicas of popular AI platforms, using these deceptive packages…
Pure Crypter Employs Multiple Evasion Techniques To Bypass Windows 11 24H2 Security Features
Cybersecurity researchers have uncovered a sophisticated malware crypter known as Pure Crypter that has evolved to specifically target and bypass the enhanced security measures introduced in Windows 11 24H2. This advanced malware packaging tool represents a significant escalation in the…
Weaponized PyPI Package Steals Solana Private Keys Via Supply Chain Attack
A sophisticated supply chain attack targeting Solana developers has compromised over 25,900 downloads through a weaponized Python package that silently steals cryptocurrency private keys during routine development workflows. The malicious campaign, centered around a package called “semantic-types,” represents a new…
Hackers Drop Info-Stealing Malware On TikTok Users Device Using AI-Generated Videos
Cybercriminals have weaponized artificial intelligence to create sophisticated social engineering attacks on TikTok, using AI-generated tutorial videos to distribute dangerous information-stealing malware that has already reached hundreds of thousands of users across the platform. Threat actors are exploiting TikTok’s massive…
Microsoft Reveals Techniques To Defending Against Advancing AiTM Attacks
Microsoft’s latest security research has unveiled sophisticated defense strategies against the rapidly evolving threat landscape of Adversary-in-the-Middle (AiTM) attacks, marking a critical development in enterprise cybersecurity. The emergence of AiTM attacks represents a fundamental shift in how threat actors approach…
New ChatGPT Scam Infects Users With Ransomware: ‘Exercise Extreme Caution’
Cisco Talos identified three strains of malware that spoof AI tools, including ChatGPT. This article has been indexed from Security | TechRepublic Read the original article: New ChatGPT Scam Infects Users With Ransomware: ‘Exercise Extreme Caution’
USDA Worker, 5 Others Charged in Food Stamp Fraud Operation
Six New York residents were charged with running a complex scheme that involved fraudulent documentation and unauthorized payment systems to steal as much as $30 million from the country’s food stamp program that tens of millions of Americans rely on…
Week in Review: Chrome password replacer, Luna Moth exploits, ChatGPT declines shutdown command
Link to episode page This week’s Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Steve Knight, former CISO, Hyundai Capital America Thanks to our show sponsor, ThreatLocker ThreatLocker® is a global leader in Zero…
LOLCLOUD – Azure Arc – C2aaS
Exploring Azure Arc’s overlooked C2aaS potential. Attacking and Defending against its usage and exploring usecases. This article has been indexed from ZephrSec – Adventures In Information Security Read the original article: LOLCLOUD – Azure Arc – C2aaS
Meta stopped covert operations from Iran, China, and Romania spreading propaganda
Meta stopped three covert operations from Iran, China, and Romania using fake accounts to spread propaganda on social media platforms. Meta announced the disruption of three influence operations from Iran, China, and Romania using fake accounts to spread propaganda and…
Countering Spear Phishing with Advanced Email Security Solutions
According to the Anti-Phishing Working Group, 989,123 phishing attacks occurred in the final quarter of 2024, continuing an upward trend from previous quarters. Spear phishing remains a dominant threat vector used by 65% of known threat actors. As these highly…
Uber’s Secret Management Platform – Scaling Secrets Security Across Multi-Cloud
Discover how Uber built a centralized platform to manage over 150,000 secrets across 5,000+ microservices, enhancing security and reducing exposure. This article has been indexed from Darknet – Hacking Tools, Hacker News & Cyber Security Read the original article: Uber’s…
SentinelOne Outage Leaves Security Teams Hanging for Six Hours
SentinelOne’s commercial customers consoles went down for about six hours May 29 in what the company says wasn’t a “security incident,” but it still faces questions from a customer based that wants to know what happened and why communication from…
ConnectWise customers get mysterious warning about ‘sophisticated’ nation-state hack
Pen tester on ScreenConnect bug: This one ‘terrifies’ me ConnectWise has brought in the big guns to investigate a “sophisticated nation state actor” that broke into its IT environment and then breached some of its customers.… This article has been…
A Hacker May Have Deepfaked Trump’s Chief of Staff in a Phishing Campaign
Plus: An Iranian man pleads guilty to a Baltimore ransomware attack, Russia’s nuclear blueprints get leaked, a Texas sheriff uses license plate readers to track a woman who got an abortion, and more. This article has been indexed from Security…
She Got an Abortion. So A Texas Cop Used 83,000 Cameras to Track Her Down.
< div class=”field field–name-body field–type-text-with-summary field–label-hidden”> < div class=”field__items”> < div class=”field__item even”> In a chilling sign of how far law enforcement surveillance has encroached on personal liberties, 404 Media recently revealed that a sheriff’s office in Texas searched data…
Deadline Extended: More Time to Submit Your Proposal for the OpenSSL Conference 2025
The OpenSSL Conference 2025 is extending its Call for Papers (CFP) deadline to June 22, 2025. We understand that the best proposals often come from teams deep in the trenches of real-world security work. You now have additional time to…
Feds arrest DoD techie, claim he dumped top secret files in park for foreign spies to find
28-year-old alleged to have made multiple drops to folks who turned out to be undercover FBI agents A Defense Intelligence Agency (DIA) IT specialist is scheduled to appear in court today after being caught by the FBI trying to surreptitiously…
Detecting Evolving Phishing Campaigns in 2025 Cyber Environments
Cybersecurity experts are warning of a dramatic shift in phishing attack strategies in 2025. Threat actors are leveraging artificial intelligence to create hyper-targeted campaigns that bypass traditional security measures. While overall phishing volume has dropped 20% compared to 2024, attacks…