Collaborate Disseminate
The attack, which originated at Context.ai, showcases the pitfalls of interconnected cloud applications and SaaS integrations with overly privileged permissions.
The post Vercel’s security breach started with malware disguised as Roblox cheats appeared first on CyberScoop.
Continue reading Vercel’s security breach started with malware disguised as Roblox cheats
GreyNoise researchers spotted a consistent trend in forthcoming vulnerabilities affecting security tools, providing defenders an early-warning system for likely imminent attacks.
The post Network ‘background noise’ may predict the next big edge-device vulnerability appeared first on CyberScoop.
Continue reading Network ‘background noise’ may predict the next big edge-device vulnerability
Kejia Wang and Zhenxing Wang established shell companies and hosted laptop farms to help operatives obtain jobs at more than 100 U.S. companies.
The post US nationals sentenced for aiding North Korea’s tech worker scheme appeared first on CyberScoop.
Continue reading US nationals sentenced for aiding North Korea’s tech worker scheme
Operation PowerOFF’s latest globally coordinated action identified more than 75,000 alleged cybercriminals. Officials warned each of them to stop jamming up traffic.
The post Officials seize 53 DDoS-for-hire domains in ongoing crackdown appeared first on CyberScoop.
Continue reading Officials seize 53 DDoS-for-hire domains in ongoing crackdown
The National Vulnerability Database will now only analyze vulnerabilities in critical software, systems used in the federal government and those under active exploitation.
The post NIST narrows scope of CVE analysis to keep up with rising tide of vulnerabilities appeared first on CyberScoop.
Continue reading NIST narrows scope of CVE analysis to keep up with rising tide of vulnerabilities
The vendor disclosed one actively exploited zero-day vulnerability in Microsoft Office SharePoint that allows attackers to view information and make changes to disclosed information.
The post Microsoft drops its second-largest monthly batch of defects on record appeared first on CyberScoop.
Continue reading Microsoft drops its second-largest monthly batch of defects on record
The social engineering campaign spiked last month and has targeted dozens of organizations since May 2025, according to ReliaQuest.
The post Black Basta’s playbook lives on as former affiliates launch fast-scale intrusion campaign appeared first on CyberScoop.
The company said a developer tool automatically retrieved a malicious version of the popular open-source library, but insists the integrity of its systems and software were not impacted.
The post OpenAI’s Mac apps needs an update thanks to the Axios hack appeared first on CyberScoop.
Continue reading OpenAI’s Mac apps needs an update thanks to the Axios hack
Censys researchers warned that thousands of devices are exposed to the Iranian government’s campaign targeting energy, water, and U.S. government services and facilities.
The post Iranian attacks on US critical infrastructure puts 3,900 devices in crosshairs appeared first on CyberScoop.
Continue reading Iranian attacks on US critical infrastructure puts 3,900 devices in crosshairs
Forest Blizzard, a threat group attributed to Russia’s GRU, hijacked network traffic to steal credentials and tokens for Microsoft accounts and other services.
The post Feds quash widespread Russia-backed espionage network spanning 18,000 devices appeared first on CyberScoop.
Continue reading Feds quash widespread Russia-backed espionage network spanning 18,000 devices