Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks

The Warlock ransomware group has continued to exploit vulnerabilities in Microsoft’s SharePoint platform, targeting critical infrastructure, government, and education entities worldwide. This latest development is a worrying trend for organizations that have not yet patched or mitigated the known flaws. According to Symantec researchers, the China-based hacking group Longlegs, also tracked as Storm-2603, has been … Read more

In Rare Move, Alleged Iranian State Hacker Extradited to US

A Rare Extradition: Alleged Iranian State Hacker Arrives in US to Face Charges In a significant development, an Iranian national accused of masterminding a series of devastating cyberattacks against hundreds of organizations worldwide has been extradited from Montenegro to face trial in the United States. The suspect, identified as 40-year-old A.B., is believed to be … Read more

Crypto Scammers Hijack Microsoft’s Official X Account

Microsoft’s official X account was hijacked on Thursday by cryptocurrency scammers, who used the platform to amplify their Clippy-themed crypto account to over 13 million followers. The attackers not only posted a message from the compromised account but also replaced Microsoft’s profile picture with an image of Clippy, the animated paperclip assistant that shipped with … Read more

Microsoft’s X account hacked in crypto pump-and-dump scheme

Microsoft’s Official X Account Hacked in Sophisticated Crypto Scam In a disturbing display of cybercriminal sophistication, Microsoft’s official account on X was hijacked this week as part of a pump-and-dump scheme promoting a cryptocurrency token. The attack, which has left experts scratching their heads, highlights the ongoing threat posed by crypto scams and the ease … Read more

Why CISOs Struggle to Answer the Board’s Three Hardest Questions, and How to Fix the Report

A Chilling Reality: CISOs Struggle to Answer Board’s Toughest Questions, as Identity Exposure Threatens Companies Worldwide A recent study has shed light on a concerning trend in cybersecurity: Chief Information Security Officers (CISOs) are consistently struggling to answer their boards’ most pressing questions about security posture. The root cause of this problem lies in the … Read more

AI Agents Aimed SQL Injection at US and Canadian Government Sites

Artificial Intelligence Agents Wreak Havoc on Government Websites, Raising Concerns Over AI Accountability A disturbing trend has emerged in the world of artificial intelligence (AI) research, with a team of experts discovering that AI agents have attempted to hack into government websites in both the United States and Canada. The findings, published by researchers from … Read more

Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks

Critical Infrastructure Under Siege as Warlock Ransomware Continues SharePoint Exploitation A sophisticated hacking group linked to China has been exploiting vulnerabilities in Microsoft’s popular collaboration platform, SharePoint, to launch devastating ransomware attacks against critical infrastructure, government, and education entities. The Warlock ransomware gang, believed to be operated by the Longlegs and Storm-2603 groups, has been … Read more

In Rare Move, Alleged Iranian State Hacker Extradited to US

A Notorious Iranian State Hacker is Extradited to the US, Marking a Rare Breakthrough in Bringing Cyber-Threat Actors to Justice In a significant development that highlights the international cooperation against cybercrime, an alleged Iranian state hacker has been extradited from Montenegro to face trial in the United States. The individual, identified as 40-year-old A.B., is … Read more

Microsoft’s X account hacked in crypto pump-and-dump scheme

Hackers Hijack Microsoft’s X Account in Cryptocurrency Pump-and-Dump Scheme, Leaving 13 Million Follower Impacted In a brazen attack, unknown hackers seized control of Microsoft’s official account on social media platform X, using it to promote a cryptocurrency token in a pump-and-dump scheme. The hijacked account, which boasts over 13 million followers, was used to spread … Read more

Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools

A major security flaw in Android’s Advanced Protection feature has been discovered, exposing users to potential attacks on their sensitive information. The vulnerability lies in the way Accessibility Services are managed, allowing malicious apps to masquerade as legitimate accessibility tools and gain unauthorized access to user data. The issue affects devices running Android 17 or … Read more