CyberNews Corporate Microsoft accounts are under siege as threat actors use sophisticated social engineering tactics to steal data from Microsoft 365 services. These highly targeted attacks, linked to extortion gangs such as ShinyHunters and Helix, rely on convincing employees to update their passkeys or single sign-on configurations via phishing sites designed to mimic legitimate Microsoft login … Read more
Cybersecurity Nightmare Unfolds as Hackers Abuse Powerful AI Model to Steal Secrets from 1.8 Million Android Apps In a stunning display of cybercriminal ingenuity, hackers have exploited a cutting-edge artificial intelligence (AI) model to extract sensitive information from over 1.8 million Android apps. The AI model in question is called Claude, developed by Anthropic, a … Read more
Threat actors have been chaining critical vulnerabilities in JFrog Artifactory to gain unauthorized access, install backdoor malware, and compromise sensitive data. According to a report from cloud security company Wiz, multiple threat actors have exploited these flaws across various environments, targeting self-hosted servers that store and manage software dependencies. The attacks rely on three key … Read more
A wave of targeted phishing attacks has been compromising corporate Microsoft accounts, allowing threat actors to steal data from Microsoft 365 services. The attackers, linked to extortion gangs such as ShinyHunters and Helix, have been using social engineering tactics to trick employees into updating their passkeys or single sign-on (SSO) configurations, often through fake IT … Read more
Florida’s Driver Database Breached by Stolen Police Account Credentials The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has confirmed that its DAVID driver database was compromised in a data breach, with over 200,000 driver records stolen. The incident highlights the importance of robust cybersecurity measures, particularly when it comes to sensitive government databases. … Read more
A Massive AI-Powered Cyberattack Has Exposed Seven Chinese Research Labs to Industrial-Scale Data Theft In a shocking revelation, Anthropic, a prominent artificial intelligence research organization, has disclosed that seven China-based AI labs have been compromised by industrial-scale Claude distillation attacks. These attacks exploit the vulnerability of sensitive data in various domains, allowing attackers to gain … Read more
A Critical Vulnerability in GitLab Has Been Actively Exploited, Putting Millions of Users at Risk GitLab, a widely-used platform for software development and collaboration, has been hit with a critical vulnerability that allows attackers to read sensitive files on compromised accounts. The flaw, given a CVSS (Common Vulnerability Scoring System) rating of 10 – the … Read more
Florida’s Driver Database Breached After Stolen Police Account Compromised A significant security incident has shaken the state of Florida, with its Department of Highway Safety and Motor Vehicles (FLHSMV) confirming that its DAVID driver database was breached by hackers. The breach, attributed to the notorious ShinyHunters extortion gang, raises concerns about data protection and highlights … Read more
Russian State-Sponsored Hackers Use Innovative Malware Rebuilding Technique, Exploiting Vulnerabilities in Security Software A disturbing trend has emerged in the world of cyber warfare, as Russian state-sponsored hackers have been caught using a sophisticated technique to rebuild malware after it’s been detected by security software. This clever tactic allows attackers to stay one step ahead … Read more
Claude, a sophisticated and highly adaptable malware framework, has been identified as the culprit behind a wave of automated attacks targeting multiple victims worldwide. This malicious tool has been used to exploit vulnerabilities in various systems, allowing attackers to steal sensitive data and wreak havoc on organizations’ digital security. At its core, Claude is an … Read more