Cyber Security

A Misconfigured Server Unveils Three Evilginx Phishing Operations Targeting Microsoft 365, Exposing Thousands of Users Security researchers have uncovered three malicious phishing operations leveraging Evilginx, a type of domain name system (DNS) manipulation attack. The attacks target unsuspecting users of Microsoft 365, a popular productivity suite used by millions worldwide. What’s more alarming is that … Read more

A sophisticated attacker has been using a suspected AI-generated PowerShell script to map Active Directory domains, exposing organizations to potential data breaches and highlighting the growing threat of artificial intelligence (AI) in cybercrime. The attack involves using a custom-built PowerShell script that leverages various techniques to gather sensitive information about an organization’s Active Directory environment. … Read more

Cybersecurity teams are facing an unprecedented challenge, thanks to the rapid rise of autonomous AI-powered systems that can sniff out software vulnerabilities with ease. The latest threat landscape is forcing security operations centers (SOCs) to rethink their approach, combining cutting-edge technology with human expertise to stay ahead of the game. In recent months, several high-profile … Read more

Meta Files Patent for AI That Can Listen All Day and Track How You’re Feeling Meta, the parent company of Facebook, Instagram, and WhatsApp, has filed a patent application detailing an artificial intelligence (AI) system that can continuously listen to users’ conversations and detect their emotional states. This development raises serious concerns about user privacy … Read more

The European Union has taken a decisive step to curb Russian cyber espionage efforts, imposing sanctions on nine individuals and four entities accused of running a yearslong campaign to undermine the bloc. The move targets those behind an online spying network that has targeted governments and critical infrastructure across at least nine countries. According to … Read more

Critical Vulnerability Found in Zimbra Collaboration Solution, Patches Released Immediately A severe security flaw has been discovered in the widely used collaboration platform Zimbra, which could allow malicious code to be executed without any user interaction. The vulnerability affects the Classic Web Client of Zimbra’s communication software suite, putting users’ sensitive information at risk. Zimbra … Read more

Russian State Hackers Target Vulnerable Routers in Critical Infrastructure Networks In a stark warning, cybersecurity agencies from the United States and nine other countries have jointly alerted that Russian state hackers are actively targeting vulnerable routers to infiltrate critical infrastructure networks. The threat, attributed to the Russian Federal Security Service (FSB) Center 16, poses a … Read more

European Union Imposes Sanctions on Russian Military Hackers Over Widespread Cyberattacks In a coordinated effort, the European Union (EU) and the United Kingdom have jointly sanctioned dozens of Russian individuals and entities accused of coordinating a network of hacking groups responsible for attacks across Europe. The sanctions target nine individuals and four entities, including high-ranking … Read more

A misconfigured server exposed three separate Evilginx phishing operations targeting Microsoft 365 users, highlighting the importance of proper security configurations and awareness about emerging threats. The revelation comes as AI-powered tools are increasingly being used to identify and exploit vulnerabilities in software systems. The compromised server, which has not been named for privacy reasons, appears … Read more

In a disturbing trend that’s been gaining momentum on the internet, a coordinated effort is underway to scan for exposed Model Context Protocol (MCP) servers and AI assistant credentials. This widespread scanning campaign has been detected by cybersecurity researchers who analyzed logs from a small web host over a two-week period. The researchers discovered that … Read more