Latest news
-
AI Security via Microsoft Security
Agents are your newest insiders. Security must move at their speed.
Agents are rapidly becoming part of how work gets done. They can support a range of activities from writing code and researching products to analyzing revenue…
-
Breaches via SOCRadar
ZoomInfo Sale, TryCircle, Vicente López, HDB, and X Leaks
Ameer OwdaameerowdaEdit Profile SOCRadar Dark Web Team identified several underground posts, including an alleged ZoomInfo database sale involving 185 million records…
-
AI Security via BleepingComputer
Microsoft fixes classic Outlook bug that hid Copilot buttons
Microsoft has fixed a known issue that removed the Copilot Chat and Copilot buttons in the classic Outlook desktop mail client for some Windows users.
-
Vulnerabilities via SecurityWeek
Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure
Threat actors have been observed delivering cryptocurrency miners and proxy software.
-
Ransomware via Malwarebytes Labs
A sextortion conspiracy killed his son (Lock and Code S07E21)
This week on the Lock and Code podcast… At just 17 years old, Jordan DeMay was murdered by strangers online. That’s how Jordan’s father, John DeMay, described what…
-
Breaches via SecurityWeek
One Compromised Login Exposed Millions of California Students’ Records
Intruders used compromised credentials to access an ETS SFTP server, copying records of California students back to 2006.
-
AI Security via Security Affairs
Deepfakes and Election Manipulation: UK Watchdog Seeks Faster Detection
The UK Electoral Commission is building an AI system to alert candidates to damaging deepfakes within three hours. The UK’s Electoral Commission is building an…
-
Breaches via The Hacker News
From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software
In Salesforce Agentforce, the recommended way to make an agent respond to events is a Flow: a record is created or a case is updated, and the Flow passes data into the…
- Advertisement
-
Threat Intel via Emsisoft
Emsisoft Blocks 100% in AVLab’s Latest Advanced In-The-Wild Malware Test
AVLab's September test evaluated 16 products against live in-the-wild malware. Emsisoft blocked all 417 samples and averaged 3.365 seconds from execution attempt to full…
-
Threat Intel via The Record
Hackers steal customer data from major Russian hosting provider FirstVDS
Hackers have stolen passwords, access credentials and other sensitive data belonging to customers of Russian hosting provider FirstVDS after exploiting a vulnerability…
-
AI Security via Wiz
Loud, Fast, and Everywhere: Anatomy of a Real AI-Driven Cloud Attack
Wiz CIRT responded to AI-driven attacks spanning cloud, Kubernetes, CI/CD, and identity. Learn how these attacks behave and how to detect them.
-
Vulnerabilities via SecurityWeek
Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack
The persistent, stealthy FortiGate implant was deployed against a telecommunications organization.
-
Breaches via Malwarebytes Labs
Millions of California students’ sensitive data stolen in breach
Personal information belonging to millions of current and former California public school students has been stolen from a system operated by Educational Testing Service…
-
AI Security via Schneier on Security
Training AIs to Solve CAPTCHAs
Interesting research: Abstract: Vision-language models (VLMs) can solve visual CAPTCHAs without task-specific training, but the agents built on them approach every…
-
AI Security via Help Net Security
With open-weight AI, more of the security burden falls on enterprises
Organizations that run open-weight AI models on their own infrastructure may have to supply safety and security controls that an AI provider would otherwise handle for…
-
Vulnerabilities via Security Affairs
Big Fish: OpenBSD Root Exploit Chains a 37-Year-Old BSD Bug With a Kernel Flaw
OpenBSD flaws, including a 37-year-old BSD bug, enable local attackers to bypass security protections and gain root access. Patches are available. Cybersecurity firm…
-
Breaches via Infosecurity Magazine
ConnectWise Shuts Off Cloud Services After ‘Unauthorized Access’ to Microsoft 365 Tenants
Cloud Backup, SaaS Security, and Cloud Management services offline as IT service provider investigates possibility that unknown attackers have full access to client…
-
Breaches via ransomware.live
🏴☠️ N0n has just published a new victim : The Akeeli Group
investigations and due diligence · USA | Client investigation reports on named individuals, with dates of birth, aliases, phone numbers and addresses; Comprehensive…
-
Breaches via ransomware.live
🏴☠️ Emperador has just published a new victim : GTL Concreto e Logística LTDA
Production and preparation of ready-mixed concrete and mortars. Production of cement products for construction. Construction of buildings and other construction works.
-
AI Security via The Hacker News
Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic
A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using malicious npm packages under the pretext of…