‘Jewelbug’ APT Balances State Espionage & Cryptocurrency Theft

A Notorious APT Group Juggles State Espionage and Cryptocurrency Theft from the Same Web Panel Researchers have uncovered a sophisticated mercenary group operating out of China that seamlessly switches between conducting high-stakes cyber espionage on behalf of nation-states and engaging in lucrative cryptocurrency theft. Dubbed “Jewelbug” by Symantec, this advanced persistent threat (APT) group has … Read more

White House Mobilizes Security Firms for Operations Against Foreign Cybercrime Gangs

The White House has announced a major expansion of federal capabilities against foreign cybercrime gangs through a new program that allows vetted private US companies to conduct targeted cyber operations under federal control. The initiative, managed by the National Coordination Center (NCC), aims to disrupt and dismantle foreign cyber-enabled transnational criminal organizations (TCOs) that pose … Read more

Fortinet Patches Authentication Flaws in FortiWeb and FortiManager

Fortinet Patches Critical Authentication Flaws in FortiWeb and FortiManager, Urges Users to Update Immediately In a significant move to shore up its defenses, network security giant Fortinet has released patches for eight vulnerabilities across its products, including two high-severity authentication bugs that could allow attackers to gain unauthorized access to sensitive systems. The company’s FortiWeb … Read more

Venture Firm Team8 Secures Additional $365 Million

Cybersecurity Venture Firm Team8 Secures $365 Million in Additional Funding, Sets Sights on Next-Gen AI-Native Companies Israel-based venture fund Team8 has secured a massive injection of capital, with an additional $365 million pouring into its coffers. This latest funding round brings the company’s assets under management to nearly $2 billion since its inception in 2014. … Read more

‘Jewelbug’ APT Balances State Espionage & Cryptocurrency Theft

Chinese Hackers-for-Hire Balance State Espionage with Cryptocurrency Heists A sophisticated group of hackers operating out of China has been caught using a single platform to carry out both state-sponsored cyber espionage and financially motivated cryptocurrency theft. Dubbed “Jewelbug” by researchers, this mercenary group is unlike any other, combining the tactics and techniques (TTPs) of a … Read more

Stealthy ‘City-Forum’ Attacks Target Salesforce and ServiceNow With Custom Toolset

Sophisticated ‘City-Forum’ Campaign Targets Salesforce and ServiceNow with Custom Toolset A highly skilled threat actor has been quietly targeting major companies using a custom-made toolset that exploits vulnerabilities in both Salesforce and ServiceNow. Dubbed “City-Forum,” this campaign has been observed hitting telecoms, banks, financial services firms, enterprise software vendors, and public sector portals. The attackers … Read more

WhatsApp Unveils New Scam Alert Feature

WhatsApp has rolled out a new beta feature called Scam Alert, designed to identify suspicious messages from unknown senders. This optional tool uses machine learning to flag potential scams, working alongside WhatsApp’s end-to-end encryption rather than undermining it. The feature is available for select users in a limited beta rollout, and once enabled, a model … Read more

Mindgard Raises $30 Million to Protect AI Systems

Mindgard Secures $30 Million in Funding to Protect AI Systems from Emerging Threats A significant funding boost has been given to Mindgard, a startup specializing in automated AI security and red-teaming solutions. The London- and Boston-based company has raised $30 million in a Series A investment round, bringing its total funding to nearly $42 million. … Read more