A New Malicious Framework Spreads Across the Globe, Stealing Sensitive Data and Cryptocurrency A highly sophisticated malicious framework called OkoBot has been identified by cybersecurity researchers at Kaspersky, delivering over 20 payloads to steal cryptocurrency wallet seed phrases, credentials, and other sensitive data. This campaign has been ongoing for more than a year, with attacks … Read more
A critical flaw has been discovered in Anthropic’s Claude Chrome browser extension, allowing malicious extensions to trigger AI actions by simulating user clicks. This vulnerability could potentially allow attackers to abuse Claude’s access to connected services such as Gmail, Google Docs, and Salesforce. The issue was identified by Ax Sharma of Manifold Security, who found … Read more
A Ransomware Attack on Fairlife Dairy Subsidiary Halts Production Across the United States Coca-Cola’s dairy brand, Fairlife, has been hit by a sophisticated ransomware attack that has brought production to a grinding halt across the US. The incident was disclosed in a filing with the US Securities and Exchange Commission (SEC) and has left the … Read more
Two Scattered Spider Hackers Receive Lengthy Sentences for £29 Million TfL Hack In a landmark case, two hackers associated with the notorious Scattered Spider group have been sentenced to 5.5 years each in prison for their roles in one of the most significant cyberattacks on London’s transportation system. The group’s brazen heist, which netted an … Read more
New Malicious Framework, OkoBot, Deploying 20 Payloads to Steal Data and Crypto A sophisticated malicious framework called OkoBot has been identified by cybersecurity researchers at Kaspersky, deploying over 20 payloads in attacks designed to steal sensitive data, including cryptocurrency wallet seed phrases, credentials, and other valuable information. The framework’s reach is global, with a significant … Read more
Claude Chrome Extension Flaw Lets Malicious Extensions Trigger AI Actions with Ease A critical flaw has been discovered in the popular Claude for Chrome browser extension, which allows malicious extensions to trigger predefined AI actions by simulating user clicks. This vulnerability could enable attackers to abuse Claude’s access to connected services like Gmail, Google Docs, … Read more
A long-dormant threat actor, Daxin, has re-emerged in Taiwan with a sophisticated pre-login backdoor, dubbed Stupig. This development is particularly concerning, given the increasing reliance on artificial intelligence (AI) for identifying and exploiting software vulnerabilities. Daxin’s reappearance highlights the ongoing cat-and-mouse game between hackers and cybersecurity professionals. The group, known for its targeted attacks in … Read more
A new and concerning type of attack has been discovered, which takes advantage of artificial intelligence (AI) agents’ vulnerabilities. Dubbed “Agent Data Injection,” this attack can trick AI agents into misclicking or running malicious commands on behalf of attackers. This threat highlights the need for organizations to bolster their defenses against software vulnerabilities identified by … Read more
Two notorious hackers, part of the infamous Spider hacking group, have been sentenced to 5.5 years each for their role in a massive cyberheist that targeted London’s transport network, Transport for London (TfL), netting a staggering £29 million. The brazen attack, which took place in 2023, was carried out by the duo using a sophisticated … Read more
For years, enterprise security relied on a predictable model: buy tools, inventory users, map systems, define policies, and let vendor-built dashboards and workflows manage the rest. But that assumption was shattered when AI agents burst onto the scene. These autonomous entities don’t follow traditional rules; they invoke tools, acquire access across systems, and adapt to … Read more