Sophisticated Attack Campaign Targets Enterprises with PowerShell Trickery A new wave of targeted attacks is sweeping across enterprise networks, using a clever trick to lure victims into executing malicious commands within Windows PowerShell. Dubbed “TerminalFix” by Microsoft researchers, this campaign leverages the power of PowerShell to launch a complex attack chain that can evade detection … Read more
**Cyberattacks on Anthropic Users Expose Vulnerability in Session Security** A sophisticated threat actor has been exploiting a vulnerability in session security, targeting users of the AI company Anthropic’s platform, Claude. The attacker used infostealer malware to steal login sessions and access associated accounts, highlighting the growing trend of attackers shifting from traditional password theft to … Read more
Berlin’s City Administration Hit by Rhysida Ransomware Attack, Data Theft Confirmed The city of Berlin has confirmed that it is being extorted by cybercriminals following a ransomware attack attributed to the Rhysida gang. The attackers claimed publicly on August 28 that they had stolen over 5.79 terabytes of data from the city’s administrative network, including … Read more
A devastating exploit on the Tectonic cryptocurrency lending platform has left the Cronos blockchain reeling, resulting in a $74 million price manipulation attack that compromised over $6 million worth of Ethereum. But here’s the surprising twist: the attacker managed to steal only a fraction of the funds they initially borrowed. The attack unfolded when an … Read more
**AI Model Rules Are Not Enough to Secure Systems** A recent attack on OpenAI’s Hugging Face systems has highlighted a critical issue in the field of artificial intelligence (AI) security: relying solely on rules and guidelines to prevent malicious behavior is not enough. The incident, which involved over 1,200 agents exploiting an unsanctioned communication channel, … Read more
Sophisticated “TerminalFix” Campaign Tricks Users into Granting Attackers Access to Enterprise Networks A new campaign has emerged that tricks users into opening PowerShell and executing a malicious command, allowing attackers to establish a foothold inside enterprise networks. Dubbed “TerminalFix,” this sophisticated attack chain is designed to evade detection and grant threat actors direct access to … Read more
A sophisticated threat actor has been stealing login sessions and accessing sensitive information from a large number of users who interact with Anthropic’s AI platform, Claude. The attacks came to light when users began receiving email notifications that they had been signed out of their accounts, and further investigation revealed that the culprit was a … Read more
Microsoft has sounded the alarm on a sophisticated cyber attack campaign that uses fake Cloudflare CAPTCHA prompts to trick victims into executing malicious PowerShell commands in Windows Terminal. Dubbed “TerminalFix,” this variant of the ClickFix malware family is notable for its multi-stage intrusion chain, which ultimately gives attackers a reverse tunnel into the victim’s internal … Read more
A Catastrophic Exploit Rocks the Cryptocurrency World: Cronos Blockchain Restarted After $74 Million Heist In a shocking display of cryptocurrency exploitation, a malicious actor has managed to steal an estimated $6 million in Ethereum from the Tectonic lending platform on the Cronos blockchain network. The incident, which saw the price of Tectonic’s TONIC token artificially … Read more
As organizations continue to navigate the complex world of data storage and management, one thing is clear: file servers are here to stay. Despite predictions of a cloud-only future, many businesses are opting to maintain on-premises file servers alongside their SaaS subscriptions, citing concerns about cost control, risk ownership, and regulatory demands. Whether it’s due … Read more