Collaborate Disseminate
While this campaign targets crypto wallets and steals money, the methodology has far wider potential that could be used by other attackers.
The post Autonomous AI Agents Provide New Class of Supply Chain Attack appeared first on SecurityWeek.
Continue reading Autonomous AI Agents Provide New Class of Supply Chain Attack
As more organizations run their own Large Language Models (LLMs), they are also deploying more internal services and Application Programming Interfaces (APIs) to support those models. Modern security risks are being introduced less from the models them… Continue reading How Exposed Endpoints Increase Risk Across LLM Infrastructure
A new phishing campaign is spreading XWorm 7.2 via malicious Excel files, hiding the malware in Windows processes, and using AES encryption to steal passwords and Wi-Fi keys. Continue reading Hackers Use Excel Exploit to Hide XWorm 7.2 in JPEG Files, Hijack PCs
A new phishing campaign is spreading XWorm 7.2 via malicious Excel files, hiding the malware in Windows processes, and using AES encryption to steal passwords and Wi-Fi keys. Continue reading Hackers Use Excel Exploit to Hide XWorm 7.2 in JPEG Files, Hijack PCs
Catalin Dragomir admitted in a US court to selling access to an Oregon state government office’s network.
The post Romanian Hacker Pleads Guilty to Selling Access to US State Network appeared first on SecurityWeek.
Continue reading Romanian Hacker Pleads Guilty to Selling Access to US State Network
Threat actors relying on AI have been exploiting exposed ports and weak credentials to take over FortiGate devices.
The post Hundreds of FortiGate Firewalls Hacked in AI-Powered Attacks: AWS appeared first on SecurityWeek.
Continue reading Hundreds of FortiGate Firewalls Hacked in AI-Powered Attacks: AWS
Patched in December 2025, the exploited flaw leads to XSS attacks via the animate tags in SVG documents.
The post Recent RoundCube Webmail Vulnerability Exploited in Attacks appeared first on SecurityWeek.
Continue reading Recent RoundCube Webmail Vulnerability Exploited in Attacks
A ransomware attack forced the University of Mississippi Medical Center to close all of its roughly three dozen clinics around the state and cancel elective procedures.
The post Mississippi Hospital System Closes All Clinics After Ransomware Attack app… Continue reading Mississippi Hospital System Closes All Clinics After Ransomware Attack
Cybersecurity researchers have disclosed what they say is an active “Shai-Hulud-like” supply chain worm campaign that has leveraged a cluster of at least 19 malicious npm packages to enable credential harvesting and cryptocurrency key theft.
The campai… Continue reading Malicious npm Packages Harvest Crypto Keys, CI Secrets, and API Tokens
Officers from Poland’s Central Bureau for Combating Cybercrime (CBZC) dismantled an organized group that used phishing to seize Facebook accounts and extract BLIK payment codes from victims. Arrest (Source: Poland’s Central Bureau for Combating Cybercr… Continue reading Police seize 100,000 stolen Facebook credentials in cybercrime raid