A Ransomware Attack on Fairlife Dairy Subsidiary Halts Production Across the United States Coca-Cola’s dairy brand, Fairlife, has been hit by a sophisticated ransomware attack that has brought production to a grinding halt across the US. The incident was disclosed in a filing with the US Securities and Exchange Commission (SEC) and has left the … Read more
Two Scattered Spider Hackers Receive Lengthy Sentences for £29 Million TfL Hack In a landmark case, two hackers associated with the notorious Scattered Spider group have been sentenced to 5.5 years each in prison for their roles in one of the most significant cyberattacks on London’s transportation system. The group’s brazen heist, which netted an … Read more
New Malicious Framework, OkoBot, Deploying 20 Payloads to Steal Data and Crypto A sophisticated malicious framework called OkoBot has been identified by cybersecurity researchers at Kaspersky, deploying over 20 payloads in attacks designed to steal sensitive data, including cryptocurrency wallet seed phrases, credentials, and other valuable information. The framework’s reach is global, with a significant … Read more
Claude Chrome Extension Flaw Lets Malicious Extensions Trigger AI Actions with Ease A critical flaw has been discovered in the popular Claude for Chrome browser extension, which allows malicious extensions to trigger predefined AI actions by simulating user clicks. This vulnerability could enable attackers to abuse Claude’s access to connected services like Gmail, Google Docs, … Read more
A long-dormant threat actor, Daxin, has re-emerged in Taiwan with a sophisticated pre-login backdoor, dubbed Stupig. This development is particularly concerning, given the increasing reliance on artificial intelligence (AI) for identifying and exploiting software vulnerabilities. Daxin’s reappearance highlights the ongoing cat-and-mouse game between hackers and cybersecurity professionals. The group, known for its targeted attacks in … Read more
A new and concerning type of attack has been discovered, which takes advantage of artificial intelligence (AI) agents’ vulnerabilities. Dubbed “Agent Data Injection,” this attack can trick AI agents into misclicking or running malicious commands on behalf of attackers. This threat highlights the need for organizations to bolster their defenses against software vulnerabilities identified by … Read more
Two notorious hackers, part of the infamous Spider hacking group, have been sentenced to 5.5 years each for their role in a massive cyberheist that targeted London’s transport network, Transport for London (TfL), netting a staggering £29 million. The brazen attack, which took place in 2023, was carried out by the duo using a sophisticated … Read more
For years, enterprise security relied on a predictable model: buy tools, inventory users, map systems, define policies, and let vendor-built dashboards and workflows manage the rest. But that assumption was shattered when AI agents burst onto the scene. These autonomous entities don’t follow traditional rules; they invoke tools, acquire access across systems, and adapt to … Read more
A Critical Flaw in Shark Vacuum Systems Exposes Thousands to Remote Control and Data Theft Risks In a disturbing revelation, researchers have uncovered an unpatched vulnerability in certain Shark vacuum models that could allow malicious actors to remotely control affected devices and access sensitive user data. The flaw affects thousands of owners across the United … Read more
A newly developed artificial intelligence (AI) system is uncovering critical software vulnerabilities at an unprecedented rate, but experts warn that human knowledge and expertise are still essential to verify and validate these findings. This AI-powered vulnerability discovery process works by feeding vast amounts of code into machine learning algorithms, which then identify patterns indicative of … Read more