CyberNews A massive data heist has struck one of the UK’s largest airport operators, leaving millions of travelers’ personal details vulnerable to cyber threats. The Manchester Airports Group (MAG) has confirmed that hackers breached its systems and stole customer data from airports in Manchester, Stansted, and East Midlands. The attackers managed to exfiltrate a wide range … Read more
Cybersecurity experts are sounding the alarm over a disturbing trend: identity exposure is being used as a key component in active attack paths, allowing hackers to breach even the most secure systems. The data tells a stark story – 11 real-world cases have revealed that attackers are exploiting exposed identities to compromise entire networks. The … Read more
A major supply chain attack on Australian businesses has led to charges being laid against a group of alleged hackers. The TeamPCP group, which had been linked to a series of high-profile attacks globally, has seen four members charged in Australia over their role in compromising several companies’ computer systems. The TeamPCP hackers are accused … Read more
As threat actors increasingly turn to artificial intelligence (AI) and machine learning (ML) to launch sophisticated attacks, cybersecurity teams are scrambling to stay ahead of the curve. A recent spate of high-profile breaches has highlighted a critical vulnerability that’s being exploited by AI-powered attackers: identity exposure. In this article, we’ll delve into 11 real-world examples … Read more
Amazon’s Kiro Prompt Injection Vulnerability Exposes Sensitive Data Across Accounts A critical vulnerability has been discovered in Amazon’s Kiro, a cloud-based platform that enables businesses to build and manage large language models. The flaw, dubbed “Kiro Prompt Injection,” allows attackers to exfiltrate sensitive data from one account to another by exploiting the way Kiro handles … Read more
Cybersecurity Threats in Cambodia Escalate as Spark RAT Exploits Vulnerable Software A highly sophisticated cyber threat has been unfolding in Cambodia, targeting government agencies and financial institutions with a potent malware called Spark RAT. What makes this attack particularly concerning is its ability to disable security tools, rendering affected organizations powerless against further exploitation. At … Read more
As we continue to navigate the complexities of modern cybersecurity, a disturbing trend has emerged in the world of AI-powered security operations. A recent analysis of real-world attacks has revealed that identity exposure is being used as a key vector for unlocking active attack paths, allowing threat actors to seamlessly escalate privileges and breach even … Read more
A major supply chain cyberattack has come under scrutiny in Australia, with authorities charging a group of hackers allegedly linked to TeamPCP. The operation, which targeted various organizations across the country, highlights the ease with which identity exposure can be exploited by attackers to gain unfettered access to sensitive systems. The alleged TeamPCP hackers are … Read more
As we continue to navigate the complex landscape of modern cybersecurity, a disturbing trend has emerged: identity exposure is becoming an increasingly popular tactic for attackers. In fact, researchers have identified 11 real-world examples where compromised identities were used as a stepping stone to launch devastating attacks on unsuspecting organizations. These cases highlight a critical … Read more
Australian authorities have made significant progress in dismantling the notorious cybercrime group TeamPCP, arresting two men allegedly involved in its operations. The arrests mark a major blow to the group’s ability to launch sophisticated attacks on software supply chains, but it also raises questions about the nature of this particular threat. The Australian Federal Police … Read more