Mount Royal University Falls Victim to Cyberattack, Exposing Sensitive Data A disturbing breach has hit Mount Royal University in Calgary, Alberta, Canada, leaving thousands of students and employees vulnerable. Hackers claiming affiliation with the threat group CMD Organization have accessed a university network, stolen sensitive data, and even deleted some files to hinder recovery efforts. … Read more
In a significant move that’s likely to be welcomed by YouTube users worldwide, DuckDuckGo has rolled out a new feature that blocks most video ads on the popular platform. The ad-blocking mechanism is built into the latest versions of the browser for iOS, Mac, and Windows, while Android users can enable it manually through their … Read more
**AI-Powered Service Desk Attacks: The Growing Threat** A recent report from IBM found that a staggering 16% of breaches involve attackers using AI-powered tools, with phishing and deepfake impersonation attacks being the most common. This trend has significant implications for security teams, particularly when it comes to the service desk. As a critical entry point … Read more
A China-linked threat cluster has been exploiting a vulnerability in Roundcube webmail servers at universities across the United States and Canada, stealing credentials and deploying backdoor malware. The campaign, tracked by cybersecurity researchers at Proofpoint as “UNK_MassTraction,” has been active since May and targets physics, engineering, and national security-related research departments. Researchers have identified a … Read more
A Sneaky Credential Thief Has Been Lurking on Popular Package Managers A group of malicious packages has been discovered on both the Node Package Manager (npm) and the Python Package Index (PyPI), compromising the credentials of users who rely on popular payment platforms such as Paysafe, Skrill, and Neteller. These fake software development kits (SDKs) … Read more
A Calgary University Hit with Cyberattack, Hackers Demand $1.9 Million Ransom Mount Royal University in Calgary has confirmed a breach of its network after hackers stole and then deleted data from its file storage systems. The attack, which occurred on June 17, disrupted various university systems, including online services and internal systems. The university has … Read more
Service desks around the world are increasingly becoming a target for sophisticated social engineering attacks, thanks in part to the growing use of artificial intelligence (AI) by malicious actors. A recent report found that 16% of data breaches studied involved attackers using AI tools, with phishing and deepfake impersonation attacks being among the most common … Read more
**Threat Actor Exploits Microsoft Entra Passkey Feature to Phish Users** A sophisticated threat actor has been targeting organizations across various sectors with a clever voice phishing scam, convincing victims to enroll a new Entra passkey under their control. The attackers are taking advantage of a recent security feature introduced by Microsoft in May, which allows … Read more
A China-Linked Threat Cluster is Stealing Credentials from Academic Researchers through Roundcube Servers A sophisticated hacking campaign has been uncovered, targeting vulnerable servers at universities in the United States and Canada. The attackers, linked to a China-based threat cluster, have been exploiting two previously identified vulnerabilities in Roundcube email clients to gain access to sensitive … Read more
Malicious SDKs on NPM and PyPI Steal Credentials from Developers and Users of Popular Payment Platforms A sophisticated cyber attack has been discovered on two popular software repositories, leaving developers and users of Paysafe, Skrill, and Neteller payment applications vulnerable to credential theft. The attackers published at least 17 malicious packages simultaneously on the Node … Read more