Okta Warns of Sophisticated Vishing Campaign Targeting Microsoft 365 Customers A highly targeted vishing campaign is underway, with hackers using social engineering tactics to trick Microsoft 365 users into divulging their login credentials. The attacks, which began in April, have been observed by Okta and are being tracked as O-UNC-066. The hacking group behind the … Read more
Cyberspies from China and India Caught Snooping on Pakistani Police Networks In a shocking revelation, researchers at SentinelOne have uncovered a two-year-long cyberespionage campaign targeting Pakistani law enforcement networks, with both Chinese and Indian-linked hackers sneaking into the same police force’s systems. The Balochistan Police, which has been caught in the middle of the rivalries … Read more
**Malicious Image Exploit Leaks Secrets from AI-Coded Repositories** Researchers at the University of Missouri-Kansas City’s ASSET Research Group have unveiled a novel technique for stealing sensitive information from code repositories. Dubbed “Ghostcommit,” this exploit takes advantage of a review gap in popular coding agents to inject malicious instructions into images, which are then executed by … Read more
Okta Sounds Alarm on Sophisticated Vishing Attacks Targeting Microsoft 365 Users A wave of highly targeted and sophisticated vishing attacks is currently sweeping through various industries, with threat actors aiming to harvest sensitive information from unsuspecting Microsoft 365 users. The campaign, which kicked off in April, has been linked to a hacking group known as … Read more
Pakistani Police Networks Breached by China and India-Linked Hackers A recent investigation has uncovered a sophisticated cyberespionage campaign that targeted the Balochistan Police force in Pakistan, with hackers linked to both China and India quietly breaching their networks over a period of two years. The attackers gained access to sensitive data, including biometric databases, criminal … Read more
A third US cybersecurity expert, Angelo Martino, has been sentenced to 70 months in prison for helping a ransomware gang while working as a ransomware negotiator. This latest development highlights the increasing threat of insider threats and underscores the need for robust measures to prevent such collaborations. Martino, 41, from Florida, was accused of working … Read more
A Trio of Threats Exposed: Ransomware Affiliate Pleads Guilty, QuimaRAT Spreads Across Platforms, and More A spate of disturbing cybersecurity incidents has come to light in recent days, showcasing the ever-evolving tactics employed by threat actors. From a ransomware affiliate’s guilty plea to a subscription-based remote access trojan (RAT) platform being advertised on dark web … Read more
Cybersecurity researchers have uncovered a sophisticated attack vector that exploits a review gap in AI-assisted code review processes. Dubbed “Ghostcommit,” this malicious technique conceals prompt injection instructions within images, allowing attackers to steal sensitive information from repositories without raising suspicion. The attack works by embedding the malicious instruction inside a PNG image file, which is … Read more
A US Cybersecurity Expert Sentenced to 70 Months in Prison for Helping Ransomware Gang Angelo Martino, a 41-year-old cybersecurity expert from Florida, has been sentenced to 70 months in prison after pleading guilty to charges of helping a ransomware gang while working as a negotiator. This is the third high-profile case in recent years where … Read more
DHS Database Hacked, Adobe Boosts Patch Cadence, and More: A Week in Cybersecurity Review In what’s being described as one of the most significant cybersecurity events this year, a top official at the US Department of Homeland Security (DHS) has pleaded guilty to charges related to ransomware attacks. Karen Serobovich Vardanyan, a 34-year-old Armenian national, … Read more