Collaborate Disseminate
Report claims more vulnerabilities created than fixed as remediation gap widens Veracode has posted its annual State of Software Security report, based on data from 1.6 million applications tested on its cloud platform, finding that more vulnerabilitie… Continue reading Rapid AI-driven development makes security unattainable, warns Veracode
Telegram posts promise up to $1,000 per call as gang refines IT helpdesk ruse Prolific cybercrime crew Scattered Lapsus$ Hunters (SLSH) is reportedly recruiting women in the hope of improving its social engineering success.… Continue reading Scattered Lapsus$ Hunters auditioning female voices to sharpen social engineering
A rare joint alert from all five spy agencies means serious business The Five Eyes intelligence alliance is urgently warning defenders to patch two Cisco Catalyst SD-WAN vulnerabilities used in attacks.… Continue reading Five Eyes warn: Patch your Cisco SD-WAN or risk root takeover
Anthropic fixed the flaws – but the AI-enabled attack surfaces remain Security vulnerabilities in Claude Code could have allowed attackers to remotely execute code on users’ machines and steal API keys by injecting malicious configurations into reposit… Continue reading Claude collaboration tools left the door wide open to remote code execution
UNC2814 historically targets governments and telcos A China-linked crew found a unique formula for attacking telcos and government orgs across the Americas, Asia, and Africa in its latest round of intrusions. Google’s threat intelligence, along with un… Continue reading Google catches Beijing spies using Sheets to spread espionage across 4 continents
Come for the coding test, stay for the C2 traffic Next.js developers are once again in the crosshairs as hackers seed malicious repositories disguised as legitimate projects, according to Microsoft, which said a limited set of those repos were directly… Continue reading Fake ‘interview’ repos lure Next.js devs into running secret-stealing malware
Former Trenchant manager profited millions from cyber tools reserved for the US The former general manager of L3Harris’s cyber arm will spend the next seven years behind bars for selling trade secrets to Russia.… Continue reading Ex-L3Harris exec jailed 7 years for selling exploits to Russia
Security pros question assurances as company offers staff credit monitoring Wynn Resorts has confirmed that employee data was stolen from its servers, and is taking the hackers’ word that they’ve since deleted it.… Continue reading Wynn Resorts takes attacker’s word for it that stolen staff data was deleted
Note to secret agents: ChatGPT is NOT a private diary A ChatGPT user with links to Chinese law enforcement tried to use the AI chatbot to run smear campaigns targeting the Japanese prime minister and other critics of the Chinese Communist Party, accord… Continue reading OpenAI says Chinese cops used ChatGPT to plan and track smear ops against opponents
And they’re being stressed by geopolitical concerns that threaten to slow important data-sharing efforts Researchers from Georgia Tech have found that the supply chain for threat intelligence data is susceptible to adversarial action, and proposed a me… Continue reading Threat intelligence supply chain is full of weak links, researchers find