Sophos uncovers AI-powered malware lab built for EDR evasion

A threat actor used AI technologies to build a malware-testing framework for developing and refining endpoint detection and response (EDR) evasion techniques, according to Sophos. The investigation began after an anomalous endpoint in a customer enviro… Continue reading Sophos uncovers AI-powered malware lab built for EDR evasion

Sensitive government personnel data posted online, Spanish police arrest suspect

The Spanish National Police arrested a man in Granada for allegedly leaking personal data belonging to members of several sensitive state institutions. According to police, the suspect published the information on multiple online platforms, exposing pe… Continue reading Sensitive government personnel data posted online, Spanish police arrest suspect

Brute-force attack triggers Dashlane account lockouts

Password manager Dashlane has confirmed that a brute-force attack targeting user accounts triggered temporary account suspensions and authentication issues. The company first acknowledged the incident on May 31 after users reported receiving account su… Continue reading Brute-force attack triggers Dashlane account lockouts

DNS-AID lets AI agents find and verify each other through DNS

AI agents run across many platforms, and each one needs a way to locate and confirm the identity of the others it works with. The Linux Foundation’s DNS-AID project gives them that capability through the Domain Name System, the same address looku… Continue reading DNS-AID lets AI agents find and verify each other through DNS

EU organizations buckle under rising compliance pressure

Cybersecurity governance in the EU is shifting under expanding frameworks such as NIS2 and DORA, while AI raises new questions for security teams. What the future brings is hard to predict, and organizations must find a way to cope. Antonija Vojnović, … Continue reading EU organizations buckle under rising compliance pressure

Websites can spy on user activity by analyzing SSD behavior

Websites have spent years collecting information about visitors through browser fingerprinting, tracking scripts, and other techniques designed to identify devices and monitor behavior. Researchers have demonstrated another method that relies on someth… Continue reading Websites can spy on user activity by analyzing SSD behavior

The behavioral signals that sharpen Trojan malware detection

Malware analysts spend a lot of time deciding which signals from a sandbox run are worth keeping. A sample executed in a controlled environment can generate hundreds of measurable attributes covering file structure, registry edits, process behavior, an… Continue reading The behavioral signals that sharpen Trojan malware detection

Cybercriminals sail away with data from 6 million Carnival customers

Carnival Corporation, one of the world’s largest cruise operators, confirmed a data breach weeks after the ShinyHunters hacking group claimed it had stolen millions of customer records. Carnival acknowledged a phishing incident involving a single emplo… Continue reading Cybercriminals sail away with data from 6 million Carnival customers