CyberNews A Major Cybersecurity Breach Rocks Microsoft: Over 78 Accounts Compromised in Massive Azure CLI Attack In a disturbing display of password spraying, at least 78 Microsoft accounts were compromised in an astonishing 81 million attempts using the company’s own Azure Command-Line Interface (CLI). The sheer scale and brazenness of this attack have left cybersecurity experts … Read more
A major development in the field of artificial intelligence (AI) and cybersecurity has unfolded, with significant implications for companies worldwide. Anthropic, a leading AI research firm, has announced that it has successfully restored its Claude model, also known as Fable 5, following the lifting of export controls by the U.S. government. The controversy began earlier … Read more
As attackers continue to push the boundaries of innovation, a new threat dubbed “Phantom Squatting” has emerged, leveraging artificial intelligence (AI) to create convincing, yet entirely fabricated, domain names for phishing and malware distribution. This sophisticated tactic has already compromised numerous organizations worldwide, highlighting the importance of robust cybersecurity measures. Phantom Squatting relies on AI-driven … Read more
Adobe has just released patches for seven critical vulnerabilities in its ColdFusion web app development platform and Campaign Classic marketing automation platform. These vulnerabilities, six of which affect ColdFusion and one affecting Campaign Classic, can be exploited remotely without user interaction to gain code execution or arbitrary code execution on unpatched systems. This is a … Read more
Cybersecurity giant Citrix has issued patches for six critical vulnerabilities affecting its NetScaler platform, which allows attackers to read sensitive files and launch crippling denial-of-service (DoS) attacks on organizations worldwide. The severity of these flaws is underscored by the fact that they were discovered using artificial intelligence (AI) models, highlighting the growing importance of AI … Read more
Cybersecurity researchers have uncovered a sophisticated malware delivery mechanism, leveraging APIs to evade detection and compromise systems worldwide. A recent analysis of 3,000 live ClickFix payloads revealed a complex web of API-driven malware distribution, compromising networks and disrupting operations across various industries. At its core, the attack relies on AI-powered models that identify vulnerabilities in … Read more
At least 78 Microsoft accounts have been compromised in a massive password spray attack that leveraged the Azure Command-Line Interface (CLI), a tool used for managing and configuring Azure services. The attack, which was launched against an estimated 81 million attempted login credentials, serves as a stark reminder of the ongoing threat posed by password-based … Read more
A highly publicized exploit of artificial intelligence (AI) technology has been resolved, but not before it brought attention to a growing concern for businesses and individuals alike: the use of AI models to discover previously unknown software vulnerabilities. Anthropic, a leading AI research firm, recently restored access to its powerful language model, Claude, after the … Read more
**AI Coding Agents Hijacked at Scale: A New Threat Vector for Attackers** In a disturbing demonstration of how easily attackers can exploit AI coding agents, researchers have shown that these tools can be hijacked to run arbitrary code on a developer’s machine by planting a single fake-error report in a public bug tracking service. This … Read more
China-Linked Cyberthreat Group Targets Southeast Asia Critical Systems, Compromising at Least 10 Regional Organizations A China-linked cyberthreat group has been making waves in Southeast Asia, compromising critical systems of multiple organizations across the region. The group, identified as CL-STA-1062 by cybersecurity firm Palo Alto Networks, has successfully targeted electricity and water providers in several countries, … Read more