China’s FamousSparrow APT Spies on US Politics in Latin America In a move that highlights the escalating tensions between China and the United States in Latin America, a sophisticated cyber-espionage group known as “FamousSparrow” has been using a custom backdoor to gather sensitive information from government agencies and major industries in Central and South America. … Read more
The US Cybersecurity and Infrastructure Security Agency (CISA) has announced it will discontinue its weekly vulnerability bulletins as of September 28. This move marks a significant shift in CISA’s approach to cybersecurity, one that prioritizes risk-based vulnerability management over traditional severity-based approaches. For years, CISA had been releasing weekly vulnerability bulletins, which listed newly disclosed … Read more
Cybercrime just got a whole lot more efficient, thanks to AI-powered attacks that are changing the game for identity security. In a disturbing demonstration of what’s possible with artificial intelligence, Google Threat Intelligence Group (GTIG) recently revealed several attacks that showcase the speed and scalability of cybercrime. One such attack saw a threat actor compromise … Read more
Cybersecurity Nightmare Unfolds as Brevo Supply-Chain Attack Injects Malware on Customer Sites A devastating supply-chain attack has rocked the cybersecurity world, with customer relationship management (CRM) company Brevo confirming that its systems were compromised by attackers. The malicious actors exploited a hardcoded Cloudflare API key to inject ClickFix scripts into Brevo’s websites and JavaScript files … Read more
A New Breed of Android Malware Leverages AI to Automate Device Control Cybersecurity researchers have uncovered a sophisticated Android malware strain called RatHat, which uses artificial intelligence (AI) to navigate and control compromised devices with unprecedented ease. This highly adaptable malware is being distributed through malicious advertisements, phishing websites, and SMS scams, targeting users who … Read more
The US Cybersecurity and Infrastructure Security Agency (CISA) has made a significant shift in its approach to vulnerability management. Effective September 28, CISA will discontinue its weekly vulnerability bulletins, instead opting for a risk-based focus on prioritizing vulnerabilities that pose a real-world threat. This move is consistent with CISA’s advice that organizations prioritize vulnerabilities based … Read more
As of October 13, devices running Windows 11 24H2 Home and Pro editions will no longer receive critical security patches and updates. This decision marks the end of mainstream support for these versions, leaving users vulnerable to emerging threats and exploits. Microsoft has been clear about its intentions, stating that after October 13, devices running … Read more
In a disturbing trend, recent attacks have demonstrated how easily artificial intelligence (AI) can be leveraged by cybercriminals to compromise user credentials at scale. What’s more, these AI-powered assaults are not only more efficient but also more convincing than traditional phishing campaigns. For security teams, this raises serious concerns about the trustworthiness of their authentication … Read more
A sophisticated supply-chain attack has left thousands of websites vulnerable to malware distribution after attackers injected malicious scripts into customer sites. Brevo, a cloud-based customer relationship management (CRM) platform, confirmed that its systems were compromised when hackers stole a Cloudflare API key and used it to inject ClickFix scripts onto its own website and those … Read more
A new, highly sophisticated Android malware called RatHat has been discovered, using artificial intelligence (AI) to automate device control and evade detection. This malware, linked to threat actors from China, targets users with an AI-powered subsystem that helps operators remotely navigate compromised devices. RatHat is distributed through various channels, including malvertising, SMS, and phishing sites … Read more