Shadow AI agents are proliferating across organizations at an alarming rate. These hidden entities have been created in popular platforms such as Salesforce Agentforce, Microsoft Copilot Studio, and Zapier, often without IT or security teams being aware of their existence. With capabilities to connect to sensitive systems and take action on their own, shadow AI … Read more
A major accounting firm’s sensitive client data has been compromised in a recent data breach, with the notorious ShinyHunters extortion gang claiming responsibility for the attack. Ernst & Young (EY), one of the world’s largest professional services firms, disclosed the breach earlier this month, revealing that an attacker had accessed its third-party support ticket system … Read more
Apple Faces Class-Action Lawsuit Over Fake Crypto Wallet App That Stole $1.8M in Bitcoin A group of three individuals has filed a class-action lawsuit against Apple, alleging that the tech giant’s failure to properly review and monitor apps distributed through its App Store led to the theft of approximately $1.8 million in Bitcoin. The plaintiffs … Read more
A highly sophisticated and resilient botnet, known as Dysphoria, has evolved its command-and-control (C2) infrastructure by incorporating blockchain technology, allowing it to remain operational even after attempts to disrupt it. The botnet, which targets Internet of Things (IoT) devices, has also introduced a new feature called victim relays, enabling it to amplify attacks and evade … Read more
A major milestone in the fight against software vulnerabilities was reached yesterday with the formation of the Open Secure AI Alliance, a 37-member consortium comprising some of the biggest names in tech, including NVIDIA, Microsoft, and Google. At the heart of this initiative is the NOOA (NVIDIA Open-Source Omniscient Analysis) framework, an open-sourced tool designed … Read more
Apple is facing a lawsuit over its handling of cryptocurrency wallet apps on the App Store, with three individuals claiming that approximately $1.8 million in Bitcoin was stolen after they downloaded and used a fake Sparrow Wallet application. The plaintiffs allege that Apple failed to adequately review and monitor applications distributed through the App Store, … Read more
Cybercrime Groups Exploit Remote Access Tools to Gain Unfettered Access to Networks A sophisticated cyberattack campaign, dubbed Operation BlueDash, has been uncovered, with hackers leveraging fake Microsoft Teams updates to deploy malicious remote management tools on unsuspecting organizations’ networks. The operation’s goal is to gain unfettered access to sensitive systems, underscoring the increasing threat posed … Read more
Cybersecurity researchers have uncovered a critical vulnerability in n8n, an open-source workflow automation platform widely used by businesses and developers. The bug, dubbed “Sandbox Escape,” allows malicious actors to execute system commands as the n8n process, potentially leading to data breaches and other serious security incidents. The vulnerability lies in the way n8n’s sandboxed execution … Read more
Cybersecurity experts are sounding the alarm about a new wave of threats that arise from artificial intelligence (AI) models, which can identify and exploit software vulnerabilities at an unprecedented scale. This trend has serious implications for businesses and individuals alike, as it allows attackers to pinpoint weaknesses in systems and launch targeted attacks. The AI-powered … Read more
A Critical Public Exploit Has Been Released for a Previously Patched vBulletin Flaw, Putting Thousands of Sites at Risk A severe vulnerability in the popular online community platform vBulletin has resurfaced in the form of a public exploit, putting thousands of websites that still haven’t patched the flaw at significant risk. The exploit allows attackers … Read more