Collaborate Disseminate
A new FS-ISAC and Akamai report warns that sophisticated DDoS attacks are severely impacting the global financial sector, leading to multi-day outages. Learn about these evolving threats and how institutions can strengthen defences. Continue reading Report Warns of Sophisticated DDoS Campaigns Crippling Global Banks
European police, led by Denmark and Sweden, are arresting individuals in a crackdown on violence-as-a-service, where criminal groups recruit teenagers online for contract killings. Learn about Europol’s OTF GRIMM task force and how they’re fighting thi… Continue reading Violence-as-a-Service: Encrypted Apps Used in Recruiting Teens as Hitmen
A new detection method from Varonis Threat Labs turns hackers’ sneaky random patterns into a way to catch hidden cyberattacks. Learn about Jitter-Trap and how it boosts cybersecurity defenses. Continue reading New Detection Method Uses Hackers’ Own Jitter Patterns Against Them
Citizen Lab and Google uncovered a new, sophisticated cyberattack linked to Russian state actors that exploits App-Specific Passwords, bypassing Multi-Factor Authentication. Discover how to protect yourself from these evolving threats. Continue reading Hackers Use Social Engineering to Target Expert on Russian Operations
Red Canary uncovers ‘Mocha Manakin,’ a new threat using paste and runs to deliver custom NodeInitRAT malware, potentially leading to ransomware. Learn to protect your systems. Continue reading New Mocha Manakin Malware Deploys NodeInitRAT via Clickfix Attack
Banana Squad hid data-stealing malware in fake GitHub repos posing as Python tools, tricking users and targeting sensitive info like browser and wallet data. Continue reading Banana Squad Hides Data-Stealing Malware in Fake GitHub Repositories
Cybercriminals are injecting fake support phone numbers onto official sites like Bank of America and Netflix. Learn how ‘search parameter injection’ scams work and protect yourself now. Continue reading Scammers Insert Fake Support Numbers on Real Apple, Netflix, PayPal Pages
Zimperium zLabs reveals GodFather malware’s advanced virtualization that hijacks mobile banking and crypto apps. Learn how it steals data on your phone. Continue reading GodFather Android Malware Runs Real Apps in a Sandbox to Steal Data
A CVSS 8.8 AgentSmith flaw in LangSmith’s Prompt Hub exposed AI agents to data theft and LLM manipulation. Learn how malicious AI agents could steal API keys and hijack LLM responses. Fix deployed. Continue reading AgentSmith Flaw in LangSmith’s Prompt Hub Exposed User API Keys, Data
Cato CTRL uncovers new WormGPT variants on Telegram powered by jailbroken Grok and Mixtral. Learn how cybercriminals jailbreak top LLMs for uncensored, illegal activities in this latest threat research. Continue reading WormGPT Makes a Comeback Using Jailbroken Grok and Mixtral Models