**Threat Actor Exploits Microsoft Entra Passkey Feature to Phish Users** A sophisticated threat actor has been targeting organizations across various sectors with a clever voice phishing scam, convincing victims to enroll a new Entra passkey under their control. The attackers are taking advantage of a recent security feature introduced by Microsoft in May, which allows … Read more
A China-Linked Threat Cluster is Stealing Credentials from Academic Researchers through Roundcube Servers A sophisticated hacking campaign has been uncovered, targeting vulnerable servers at universities in the United States and Canada. The attackers, linked to a China-based threat cluster, have been exploiting two previously identified vulnerabilities in Roundcube email clients to gain access to sensitive … Read more
Malicious SDKs on NPM and PyPI Steal Credentials from Developers and Users of Popular Payment Platforms A sophisticated cyber attack has been discovered on two popular software repositories, leaving developers and users of Paysafe, Skrill, and Neteller payment applications vulnerable to credential theft. The attackers published at least 17 malicious packages simultaneously on the Node … Read more
A new threat has emerged, one that challenges the very foundations of endpoint security: AI coding agents are inadvertently triggering rules designed to catch attackers, leaving organizations vulnerable to compromise. The issue stems from advanced artificial intelligence (AI) models, specifically those used in software development and testing, which can mimic malicious behavior and trigger security … Read more
A sophisticated phishing campaign, dubbed “Pink,” has been targeting Microsoft 365 users across various industries, tricking them into enrolling fake Entra passkeys under the attacker’s control. The scheme exploits a legitimate Microsoft feature introduced in May, which allows administrators to run passkey registration campaigns. Threat actors are using this capability to phish victims and gain … Read more
GitHub’s AI-powered coding tool, Copilot, is being hailed for its ability to detect and refuse requests that could potentially harm users. This innovative feature allows Copilot to not only recognize malicious code but also prevent it from being written in the first place. Copilot uses a combination of machine learning algorithms and natural language processing … Read more
Ubiquiti’s Critical UniFi Flaws Patched Across Multiple Devices, but Many Remain Unprotected Ubiquiti Networks, a leading provider of networking hardware and software solutions, has issued critical security patches for its widely-used UniFi platform. The patches address multiple vulnerabilities in various UniFi products, including Connect, Talk, Access, Protect, and OS, leaving millions of users exposed to … Read more
A new and insidious form of cyberattack is making headlines, threatening to compromise even the most advanced security measures. Dubbed “HalluSquatting,” this emerging threat exploits AI-powered coding assistants to install botnet malware on unsuspecting devices. The attack’s sophistication and potential impact have left cybersecurity experts scrambling for solutions. At its core, HalluSquatting relies on a … Read more
A surprising revelation has come to light, highlighting the double-edged nature of artificial intelligence (AI) in the realm of cybersecurity. AI-powered coding agents have inadvertently triggered endpoint security rules designed to detect and prevent malicious activity, creating a peculiar cat-and-mouse scenario between defenders and attackers. This unexpected consequence stems from the increasing reliance on AI … Read more
A sophisticated malware campaign, dubbed SCMBANKER, is targeting users of Mexican banking institutions, exploiting a unique tactic that combines social engineering with artificial intelligence (AI) generated content. The malware uses ClickFix, a tool designed to bypass security checks and fix “broken” installers, to deliver its payload. This approach allows it to evade detection by traditional … Read more