Collaborate Disseminate
The FBI removed a contractor over a ShinyHunters-linked breach. Reuters sources identified Accenture and an unpatched Oracle PeopleSoft system. Continue reading FBI Removes Accenture Contractor Over ShinyHunters Job Site Data Breach
The FBI confirmed multiple arrests in its ShinyHunters investigation after suspected member Saif al-Din Khader was reportedly detained in Jordan. Continue reading FBI Confirms Multiple Arrests in ShinyHunters Investigation
Russian group Star Blizzard expands phishing campaigns with a new malware delivery RedFlick technique, using scheduled tasks to deliver the CosmicPulse backdoor. Continue reading Star Blizzard Targets 100+ Organizations with Phishing and RedFlick Technique
CloudSyncD macOS backdoor uses a fake Zoom installer to steal Mac passwords, bypass Gatekeeper and connect infected devices to remote C2 servers. Continue reading New CloudSyncD macOS Backdoor Uses Fake Zoom Installer to Steal Passwords
Times Mobility says a data breach exposed data linked to 6.6 million accounts, including 1.6 million identity records with driver’s license images and documents too. Continue reading Japanese Car-Sharing Site Times Car Data Breach Affects 6.6M Accounts
CloudSEK uncovered the MALFEX campaign using malicious npm packages to deploy Overlord RAT, steal Discord and browser data,… Continue reading MALFEX npm Attack Spreads Windows RAT, Steals Discord and Browser Data
Cofense researchers reveal how Global Group uses payment-themed phishing, malicious ISO files and WinMerge to deploy ransomware and extort large enterprises. Continue reading Global Group Ransomware Abuses WinMerge to Deploy Encryptor
Students, job seekers and university staff, watch out for fake job offers sent from legitimate university email accounts. Continue reading Hackers Use Hijacked University Emails to Scam Students, Pose as FBI Agent
A teen hacker found an authentication flaw in Microsoft’s Titan analytics service, where metadata indicated an estimated 17.3… Continue reading Teen Hacker Finds Auth Flaw in Microsoft System With 17.3 Trillion Data Rows
Forcepoint X-Labs has published new research showing that indirect prompt injection against AI email summarizers can work without… Continue reading Fake Email Thread Tricks AI Summarizer Without Hidden Text