Hotel Wi-Fi Hacks Expose Sensitive Business Info, Targeting Traveling Employees Worldwide A sophisticated hacking campaign has been underway since at least June, compromising hotel and conference center Wi-Fi networks to steal Microsoft 365 accounts. The attackers, who appear to be highly organized and well-funded, are using a technique known as DNS hijacking to redirect users … Read more
A sophisticated cyberattack on Thailand’s Ministry of Finance has been uncovered, with a threat actor using an open-source AI agent called Hermes to automate post-exploitation activity. The attack highlights the growing trend of adversaries leveraging artificial intelligence and machine learning to enhance their capabilities and evade detection. The breach was discovered by threat intelligence company … Read more
OnTrac Parcel Delivery Company Hit with Network Hack, Customer Data Potentially Exposed OnTrac, a private American parcel delivery company, has informed its customers that hackers breached its corporate network and may have accessed personal details belonging to its clients. The incident was detected on March 23, and an internal investigation revealed that the attacker accessed … Read more
Cybersecurity experts have sounded the alarm on a new type of attack that leverages artificial intelligence (AI) coding agents to compromise systems with alarming ease. Dubbed “HalluSquatting,” this threat is actually a variant of three earlier attacks, all of which exploit the same flaw in AI coding agents: their tendency to trust and execute code … Read more
Cybersecurity Threat Alert: Hotel Wi-Fi Hijacked to Steal Microsoft 365 Accounts A disturbing trend has been unfolding in the cybersecurity world, with hackers exploiting hotel and conference center Wi-Fi networks to steal sensitive information from unsuspecting users. By hijacking DNS settings on these networks, attackers are redirecting users to fake Microsoft 365 login pages, compromising … Read more
Thai Finance Ministry Under Siege: AI-Powered Hackers in Uncharted Territory A sophisticated cyberattack on Thailand’s Ministry of Finance has been uncovered, with hackers using an open-source artificial intelligence (AI) agent called Hermes to automate post-exploitation activities. The breach, which occurred between July 9 and 13, exposed several web directories containing hundreds of files associated with … Read more
OnTrac parcel delivery company has disclosed a significant security incident, revealing that hackers breached its corporate network and potentially accessed sensitive information belonging to its customers. The intrusion was detected on March 23, with an internal investigation showing that attackers accessed certain files between March 20 and 22. The affected company, OnTrac, specializes in “last-mile” … Read more
A sophisticated phishing campaign is targeting Zoom users, leveraging AI-driven profiling of cryptocurrency wallets to deliver malware and steal sensitive information. The BlueNoroff group, known for its advanced tactics, is behind this operation. The attack relies on a custom-built kit that utilizes machine learning algorithms to identify the type of cryptocurrency wallet associated with each … Read more
Massive Microsoft 365 Outage Caused by Maintenance Bug, Leaving Users Scrambling In a dramatic display of the intricate dance between human error and automated systems, Microsoft’s massive outage of its popular Microsoft 365 suite was caused by a simple maintenance bug. The glitch mistakenly removed IP routes from more devices than intended, disrupting Azure and … Read more
Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft’s Servers A critical vulnerability has been discovered in Bing Images, allowing attackers to execute arbitrary commands with elevated privileges on Microsoft’s servers by uploading crafted SVG images. This flaw affects anyone who uses Bing Images to upload pictures, making it a significant concern … Read more