Cybercrime
Relying on social engineering, the hacking group engages in credential phishing, malware distribution, and fraud activities.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Vulnerabilities
A researcher has disclosed the full details of the vulnerability and released a PoC without notifying Microsoft in advance.
Malware & Threats
The attackers had access to a senior executive’s email account for 150 days and exfiltrated data for months.
Vulnerabilities
The default HTTP/2 configuration of major web servers is vulnerable to an attack chain combining a compression bomb and a Slowloris-style hold.
Vulnerabilities
Microsoft responds to backlash over its threats of legal action against researchers who publicly disclose zero-day vulnerabilities.
Artificial Intelligence
The order establishes a framework for the federal government to vet the national security risks of the most advanced AI systems for up to...
Mobile & Wireless
A simple development setting bypassed protections designed to prevent unauthorized Android apps from accessing Microsoft account tokens, exposing billions of installations.
Artificial Intelligence
Only approximately 50 companies have had access to Mythos until now and they have found thousands of vulnerabilities in their products.
Supply Chain Security
Hackers published 96 malicious package versions, injected with a credential-stealing worm similar to Mini Shai-Hulud.
Cybercrime
Dashlane’s security systems automatically locked accounts to protect them against the hacking attempts.
Vulnerabilities
Proof-of-concept (PoC) exploit code has been released for the CIFSwitch flaw, which allows low-privileged users to escalate to root on vulnerable Linux systems.
Vulnerabilities
The one-click vulnerability allows attackers to execute arbitrary code on self-hosted Flowise servers by tricking users into importing a malicious chatflow.
Cybercrime
The notorious ShinyHunters extortion group leaked over 42 million records allegedly stolen from Charter in April.
Data Breaches
Data breach leaves nearly 6 million Carnival customers navigating identity theft risks.
Artificial Intelligence
CISOs are now facing machine-speed attacks and asking, “How do I agent?” The industry must provide remediation at scale.
Identity & Access
As AI accelerates phishing, session hijacking, and credential abuse, security teams are racing to close the gap between attacker speed and defensive response.
Nation-State
The attack was claimed by a hacktivist group, but evidence showed it used infrastructure linked to Iranian government threat actors.
Artificial Intelligence
The AI giant says the new plugin, which helps developers find vulnerabilities as they write code, has been used extensively internally.
Data Breaches
The allegedly stolen information leaked by ShinyHunters contains email addresses, names, addresses, and dates of birth.
Cybercrime
The two own Dutch companies that allegedly provided bulletproof hosting services to Russia-aligned threat actors.
Mobile & Wireless
The bugs could be exploited to crash Safari, corrupt memory, leak sensitive data, escape the sandbox, and exfiltrate data.
Artificial Intelligence
Vulnerabilities
Supply Chain Security
Data Breaches
Vulnerabilities
Artificial Intelligence
Artificial Intelligence
