CyberNews

As AI agents become increasingly prevalent in our daily lives, they also bring with them a new set of risks and challenges. Autonomous systems can be incredibly powerful, but their ability to act without human oversight or control has raised concerns about accountability and security. A recent innovation aims to address this issue by introducing … Read more

Cyber attackers have been using a new tactic to compromise Microsoft Teams users, according to researchers from Palo Alto Networks. The “Spring Ring” operation has targeted at least 150 employees across multiple companies with voice phishing (vishing) attacks that aim to install remote monitoring and management tools on their machines. The campaign is significant because … Read more

Cybercriminals have launched a coordinated operation, dubbed “Spring Ring,” targeting Microsoft Teams users with sophisticated voice phishing (vishing) attacks. The campaign aims to compromise over 150 users across multiple companies, granting attackers remote access to sessions, spreading malware, and even taking control of infrastructure. Researchers from Palo Alto Networks observed the Spring Ring operation between … Read more

Brett Johnson’s Dark Past Illuminates AI-Powered Cybercrime Advantage Cybersecurity expert Brett Johnson, once dubbed the “original Internet Godfather” by the US Secret Service for his role in building and running Shadow Crew, a pioneering cybercrime community, has spoken out about how artificial intelligence (AI) is giving cybercriminals an unfair advantage. In a recent demonstration at … Read more

A New Wave of SonicWall SMA 1000 Zero-Days Enables Unauthenticated RCE Attacks The cybersecurity community is bracing itself for yet another wave of attacks on SonicWall’s SMA 1000 perimeter devices, this time exploiting two zero-day vulnerabilities that enable unauthenticated remote code execution (RCE). The latest exploits follow a summer of similar attacks on other SMA … Read more

The rapid acceleration of vulnerability discovery due to the use of AI has sent shockwaves through the cybersecurity community, sparking concerns about the ability of enterprise security teams to keep pace. However, a new study suggests that while the situation may seem dire at first glance, it’s actually more manageable than initially feared – provided … Read more

A Major Cybercrime Network Dismantled: Sality Botnet’s 23-Year Reign Comes to an End In a significant blow to cybercrime, international law enforcement agencies and private partners have joined forces to dismantle the Sality botnet infrastructure in a joint global takedown. This operation marks a major milestone in the ongoing effort to disrupt and dismantle large-scale … Read more

Brett Johnson, a former cybercriminal and founder of Shadow Crew, has shed light on how artificial intelligence (AI) is giving attackers a significant advantage in the cat-and-mouse game between cyber threat actors and defenders. In an exclusive conversation with Dark Reading, Johnson shared his insights on how AI-powered tools are compressing the time it takes … Read more

**Critical SonicWall Vulnerabilities Enable Unauthenticated Remote Code Execution** A fresh wave of attacks is targeting select SonicWall SMA 1000 perimeter devices, leveraging two zero-day vulnerabilities that can be chained together to achieve unauthenticated remote code execution (RCE). The exploitation activity follows earlier this summer’s attacks on two other zero-day vulnerabilities in the vendor’s edge devices. … Read more

A recent study has shed new light on the rapid acceleration of vulnerability discovery thanks to AI. At first glance, the numbers may seem daunting: monthly Common Vulnerabilities and Exposures (CVE) disclosures have risen 145% in just two years, with a staggering 49,979 vulnerabilities disclosed in 2025 alone. But according to Echo’s Mythos Readiness Report, … Read more