Spain’s Data Agency Reports First Notified AI-Powered Data Breach, Highlighting Shift in Cybersecurity Landscape The Spanish Data Protection Agency (AEPD) has been notified of a data breach allegedly carried out by an artificial intelligence (AI) agent powered by a large language model. The attack is significant not only because it marks the first reported instance … Read more
Malicious Browser Extensions Spreading in Brazil, Stealing Sensitive Data A sophisticated malware operation has been spreading in Brazil since mid-2025, using a toolkit called KREMLIN to install malicious Chrome and Edge extensions that steal credentials, session tokens, and sensitive data. Researchers at Elastic Security Labs discovered the campaign and have now disrupted it by registering … Read more
Iranian hackers have been using a sophisticated Windows malware strain, known as CHOSEN BRICK, to spy on targets worldwide. The threat actor, believed to be linked to the Iranian government, has been targeting dissidents, activists, and journalists in the U.S., U.K., and Netherlands with a highly customized approach. The attacks begin with social engineering messages … Read more
Windows 11 Update Causes Domain Trust Issues for Some Enterprise Users A growing number of Windows administrators have reported a critical issue with Microsoft’s latest security update, KB5124008, which is causing domain trust relationships to break on some enterprise systems. This has resulted in users being unable to log in with valid domain credentials, even … Read more
A New Jersey Court Takes Down Data Broker Radaris in Landmark Privacy Case In a significant victory for individuals seeking to protect their personal information, a New Jersey court has ordered the transfer of several domains owned by data broker Radaris.com to the plaintiffs in a lawsuit alleging the company’s violation of state privacy law. … Read more
Malicious extension operation spreads in Brazil, infects over 1,500 systems A sophisticated malware campaign has been making headlines in recent months, with researchers at Elastic Security Labs uncovering a toolkit named KREMLIN that’s being used to install malicious Chrome and Edge extensions. These extensions are designed to steal sensitive information from unsuspecting users, including credentials, … Read more
A newly discovered browser extension has been found to have the capability to hijack popular AI assistants across multiple platforms, compromising the security of millions of users. The extension, which was available for download on various online marketplaces, can secretly access and manipulate AI-powered tools such as Google Assistant, Amazon Alexa, and Microsoft Bing. The … Read more
Russian enterprises are facing a significant cybersecurity threat as three separate threat groups have launched coordinated attacks using backdoors, ransomware, and wipers. The attacks aim to compromise sensitive data and disrupt business operations, leaving companies vulnerable to further exploitation. The three threat groups, identified as TA456, TA457, and TA458, have been actively targeting Russian enterprises … Read more
A Critical Vulnerability in Issabel Framework Exposes Systems to Remote Attacks A severe security flaw has been discovered in the open-source Issabel framework, a popular platform for building and managing IP PBX systems. Attackers can exploit this vulnerability to execute arbitrary operating system commands on affected systems without requiring authentication. The issue affects not only … Read more
A Data Broker’s Domain Empire Crumbles in Battle Over Online Privacy Radaris.com, a consumer data broker with a reputation for ignoring requests to remove personal information from its vast online empire, has lost control of multiple domains after being sued by a company that alleged Radaris was violating a New Jersey privacy law. The law … Read more