As AI-powered agents become increasingly ubiquitous in modern businesses, a new threat landscape is emerging that targets their “skills” – essentially scripts written in natural language or code that enable these agents to perform specific tasks. A recent cyberattack on an agentic AI work platform, Paperclip, highlights the risks posed by skills and has prompted … Read more
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-priority alert to all federal agencies, instructing them to patch two critical vulnerabilities in the TrueConf Server self-hosted communications platform as soon as possible. These flaws, which allow attackers to remotely execute arbitrary scripts and gain code execution on vulnerable servers, have already been … Read more
SynkLoader Malware Pushed Through Microsoft Teams Phishing Campaigns, Steals Credentials and More A sophisticated malware campaign has been uncovered, using Microsoft Teams to distribute a previously unknown malware family called SynkLoader. The attackers use phishing tactics, impersonating IT help desks, to trick victims into installing a fake “PowerShell Cleaner” executable hosted on Microsoft Azure. Once … Read more
Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet A sophisticated piece of malware has been discovered spreading through built-in updaters in certain Android car systems, allowing hackers to engage in ad fraud and create a proxy botnet. The malware, which has already infected hundreds of vehicles worldwide, poses a significant threat … Read more
Microsoft’s own security tool, Microsoft Defender, has been found vulnerable to a critical flaw that allows attackers to delete security software installed on Windows systems at boot time. This means that malicious actors can exploit this weakness to prevent even Microsoft’s own security measures from loading, effectively rendering the system completely exposed and undefended. The … Read more
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-priority alert to federal agencies, ordering them to patch two critical vulnerabilities in the TrueConf Server self-hosted communications platform as soon as possible. These flaws have been actively exploited by hackers, putting sensitive information and systems at risk. TrueConf Server is used by organizations … Read more
A staggering number of Amazon Web Services (AWS) access keys have been left exposed online, putting hundreds of companies at risk of full control over their corporate accounts. Truffle Security has been tracking this issue for four years and has found that over 9,300 AWS access keys have been publicly exposed since August 2022. These … Read more
A New Malware Family Emerges in Microsoft Teams Phishing Campaigns, Threatens Corporate Credentials and Data In a disturbing trend, cybercriminals have started using a previously unknown malware family called SynkLoader to steal sensitive information from unsuspecting victims through fake Microsoft Teams phishing campaigns. This malicious software, dubbed “SynkLoader,” is designed to extract credentials, profile systems, … Read more
Android devices are being compromised by a sophisticated malware campaign, which spreads through built-in updaters and exploits vulnerabilities in popular apps. The malicious code, dubbed “ProxyBot,” is designed to create a proxy botnet that can be used for various illicit activities, including ad fraud. The affected Android phones are those running the latest versions of … Read more
A Critical Flaw in Microsoft Defender’s Driver Exposes Organizations to Catastrophic Data Loss A recently disclosed vulnerability in Microsoft Defender’s own driver has been found to allow attackers to delete security software at boot time, leaving systems and data vulnerable to even more severe threats. This alarming finding affects organizations worldwide that rely on Microsoft … Read more