CyberNews

A sophisticated phishing-as-a-service (PhaaS) platform, dubbed Forg365, has been uncovered targeting Microsoft 365 users with a particularly insidious tactic. The attackers use AI-generated device codes and stolen Active Idle Time Management (AitM) sessions to breach user accounts, underscoring the evolving nature of cyber threats. Forg365’s operation hinges on its ability to generate convincing device codes, … Read more

A new type of attack, dubbed MemGhost, has been discovered that can plant persistent false memories in artificial intelligence (AI) agents through a single email. This alarming threat exploits vulnerabilities in AI systems, compromising their decision-making processes and potentially leading to catastrophic consequences. MemGhost works by injecting malicious code into an AI agent’s training data, … Read more

A new wave of cyber threats is emerging, thanks to artificial intelligence (AI) models that can identify and exploit software vulnerabilities with unprecedented speed and accuracy. This worrying trend highlights the need for businesses to reevaluate their security strategies and stay one step ahead of these advanced attacks. The threat landscape has become increasingly complex, … Read more

A Recent Data Leak Exposes Critical Vulnerabilities in CISA’s Security Practices The US Cybersecurity and Infrastructure Security Agency (CISA) has released a postmortem report on a significant data leak that occurred earlier this year. A contractor had publicly exposed dozens of internal CISA credentials, including sensitive AWS Govcloud keys, in a GitHub repository for nearly … Read more

Meta’s latest patent filing has sent shockwaves through the tech community, revealing an artificial intelligence system designed to eavesdrop on users for extended periods and monitor their emotional states. This AI-powered surveillance tool is raising serious concerns about user privacy and the potential for mass-scale manipulation. At its core, the patented technology utilizes natural language … Read more

Cybersecurity researchers have uncovered a new and sophisticated threat actor using a cloud-based phishing-as-a-service (PhaaS) platform, dubbed Forg365, which specifically targets Microsoft 365 users. This malicious operation leverages device code and Active Inventory Management (AitM) session theft to compromise sensitive information. Forg365 is an intriguing example of how AI-driven security threats are evolving. By using … Read more

A New Kind of Social Engineering Attack Is Planting Fake Memories in AI Agents, With Devastating Consequences Cybersecurity experts are sounding the alarm about a novel attack vector that exploits the vulnerabilities of artificial intelligence (AI) systems. The attack, dubbed MemGhost, involves sending a single email to an AI agent, which can then alter its … Read more

A new wave of attacks is sweeping through the digital landscape, driven by AI-powered threats that exploit software vulnerabilities at an unprecedented pace. This alarming trend not only puts individual users at risk but also threatens the very foundations of our online world. As a result, it’s imperative for organizations and individuals to take proactive … Read more

A recent data leak at the US Cybersecurity and Infrastructure Security Agency (CISA) has provided a stark reminder of the importance of proper security incident response and continuous monitoring. For almost six months, a contractor had publicly exposed dozens of internal CISA credentials on GitHub, including AWS Govcloud keys, before being notified by KrebsOnSecurity. The … Read more

European Union and UK Unite Against Russian Cyber Threats, Impose Sanctions on Military Hackers In a significant move to counter Russia’s escalating cyberattacks, the European Union (EU) and the United Kingdom have jointly imposed sanctions on dozens of individuals and entities linked to Russian military intelligence (GRU) hackers. The coordinated effort targets those responsible for … Read more