Cybersecurity teams are increasingly turning to artificial intelligence (AI) to help them stay one step ahead of hackers, but a recent breakthrough suggests that even more can be achieved by combining AI with human analysts. Experts say this hybrid approach can significantly enhance an organization’s defenses against software vulnerabilities. At the heart of this innovation … Read more
Google and Microsoft’s popular browser extension, ModHeader, has been removed from their respective stores after a dormant collector was discovered to be embedded within it. The extension, which boasts an impressive 1.6 million installs across both platforms, is used by developers and security professionals to manipulate HTTP requests and simulate different scenarios. The revelation came … Read more
A newly discovered macOS malware, dubbed CrashStealer, is making headlines for its unique ability to bypass Gatekeeper checks and infect even the most secure Macs. What’s more alarming is that this malware uses a notarized dropper, which means it can evade many built-in security features designed to protect macOS users. CrashStealer has been observed in … Read more
Cybersecurity watchdog CISA has issued a high-priority warning about two vulnerabilities in widely-used Joomla extensions that are being actively exploited by attackers. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urges federal agencies to apply security updates within three days, as hackers are taking advantage of arbitrary file upload flaws in the iCagenda and Balbooa … Read more
A sophisticated phishing-as-a-service (PhaaS) platform, dubbed Forg365, has been uncovered targeting Microsoft 365 users with a particularly insidious tactic. The attackers use AI-generated device codes and stolen Active Idle Time Management (AitM) sessions to breach user accounts, underscoring the evolving nature of cyber threats. Forg365’s operation hinges on its ability to generate convincing device codes, … Read more
A new type of attack, dubbed MemGhost, has been discovered that can plant persistent false memories in artificial intelligence (AI) agents through a single email. This alarming threat exploits vulnerabilities in AI systems, compromising their decision-making processes and potentially leading to catastrophic consequences. MemGhost works by injecting malicious code into an AI agent’s training data, … Read more
A new wave of cyber threats is emerging, thanks to artificial intelligence (AI) models that can identify and exploit software vulnerabilities with unprecedented speed and accuracy. This worrying trend highlights the need for businesses to reevaluate their security strategies and stay one step ahead of these advanced attacks. The threat landscape has become increasingly complex, … Read more
A Recent Data Leak Exposes Critical Vulnerabilities in CISA’s Security Practices The US Cybersecurity and Infrastructure Security Agency (CISA) has released a postmortem report on a significant data leak that occurred earlier this year. A contractor had publicly exposed dozens of internal CISA credentials, including sensitive AWS Govcloud keys, in a GitHub repository for nearly … Read more
Meta’s latest patent filing has sent shockwaves through the tech community, revealing an artificial intelligence system designed to eavesdrop on users for extended periods and monitor their emotional states. This AI-powered surveillance tool is raising serious concerns about user privacy and the potential for mass-scale manipulation. At its core, the patented technology utilizes natural language … Read more
Cybersecurity researchers have uncovered a new and sophisticated threat actor using a cloud-based phishing-as-a-service (PhaaS) platform, dubbed Forg365, which specifically targets Microsoft 365 users. This malicious operation leverages device code and Active Inventory Management (AitM) session theft to compromise sensitive information. Forg365 is an intriguing example of how AI-driven security threats are evolving. By using … Read more