A staggering one million emails, each carefully crafted with the victim’s name and tailored to their specific role within a company, were sent in just three days by a cunning threat actor using artificial intelligence (AI) to fuel its phishing campaign. This unprecedented volume of personalized emails was able to evade detection and convince targets … Read more
A Massive AI-Driven Hackathon: 1.8M Android Apps Compromised by ShinyHunters Collective In a disturbing display of cybercriminal ingenuity, hackers have leveraged the powerful language model Claude to extract sensitive information from an astonishing 1.8 million Android apps. The attack, orchestrated by the notorious ShinyHunters collective, has left security experts sounding alarm bells about the alarming … Read more
Global Cyber Outages Escalate as CISA Calls for Transparent Breach Notifications A new joint government advisory from the Cybersecurity and Infrastructure Security Agency (CISA), in collaboration with the FBI and international partners, has sent a clear signal to organizations worldwide: it’s time to prioritize transparency over liability protection when communicating about IT and operational technology … Read more
Artificially Intelligent Scammers Flood Inboxes with Personalized Phishing Emails A recent wave of highly targeted phishing emails has left security experts sounding alarms about the escalating threat posed by AI-assisted cyber attacks. In a staggering display of automation, an unidentified threat actor sent over one million personalized emails to unsuspecting victims in just three days, … Read more
Threat actors are exploiting critical vulnerabilities in JFrog Artifactory, a popular software repository management platform, to gain unauthorized access and deploy backdoor malware on self-hosted servers. A recent report from cloud security company Wiz has confirmed that multiple threat actors have chained these flaws to bypass authentication, elevate privileges, and install malicious plugins. The attacks … Read more
Corporate Microsoft accounts are under siege as threat actors use sophisticated social engineering tactics to steal data from Microsoft 365 services. These highly targeted attacks, linked to extortion gangs such as ShinyHunters and Helix, rely on convincing employees to update their passkeys or single sign-on configurations via phishing sites designed to mimic legitimate Microsoft login … Read more
Cybersecurity Nightmare Unfolds as Hackers Abuse Powerful AI Model to Steal Secrets from 1.8 Million Android Apps In a stunning display of cybercriminal ingenuity, hackers have exploited a cutting-edge artificial intelligence (AI) model to extract sensitive information from over 1.8 million Android apps. The AI model in question is called Claude, developed by Anthropic, a … Read more
Threat actors have been chaining critical vulnerabilities in JFrog Artifactory to gain unauthorized access, install backdoor malware, and compromise sensitive data. According to a report from cloud security company Wiz, multiple threat actors have exploited these flaws across various environments, targeting self-hosted servers that store and manage software dependencies. The attacks rely on three key … Read more
A wave of targeted phishing attacks has been compromising corporate Microsoft accounts, allowing threat actors to steal data from Microsoft 365 services. The attackers, linked to extortion gangs such as ShinyHunters and Helix, have been using social engineering tactics to trick employees into updating their passkeys or single sign-on (SSO) configurations, often through fake IT … Read more
Florida’s Driver Database Breached by Stolen Police Account Credentials The Florida Department of Highway Safety and Motor Vehicles (FLHSMV) has confirmed that its DAVID driver database was compromised in a data breach, with over 200,000 driver records stolen. The incident highlights the importance of robust cybersecurity measures, particularly when it comes to sensitive government databases. … Read more