Collaborate Disseminate
Most email defenses still do the job they did a decade ago. Scan the message, look for something malicious, block it. That worked when the danger sat in the payload, a bad link or an attachment. It stopped working when the danger moved into the message… Continue reading Phishing 3.0: The Fight Moves to Agent Versus Agent
Cybersecurity researchers have flagged a global cybercrime operation that abuses thousands of hacked WordPress websites as infrastructure to disseminate malware, commandeer infected hosts, store stolen documents, screenshots, and activity logs created … Continue reading StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, stating they are being exploited in the wild.
The shortcomings added to the KEV catal… Continue reading Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation
Microsoft Defender Experts have linked more than 30 web domains to MacSync Stealer, a macOS-focused information stealer, after correlating recurring endpoint and network behaviors across changing infrastructure, tracing the malware from payload retriev… Continue reading Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure
A JavaServer Pages (JSP) web shell deployed following the exploitation of a critical security flaw in PTC Windchill and FlexPLM servers is specifically designed for the enterprise Product Lifecycle Management (PLM) software, according to new findings f… Continue reading Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data
Varonis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal that it said could allow a single click on a crafted link to silently pull data from connected apps and other information available to the victim’s Copilot session.
Two critical vulnerabilities impacting MLflow, an open-source artificial intelligence (AI) platform, and FUXA, an open-source, web-based SCADA / HMI software built for operational technology (OT) and industrial automation, are witnessing malicious scan… Continue reading Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets
A ransomware affiliate calling itself Ransom Busters has been spotted proactively sending emails to victim organizations and claims to delete stolen data from ransomware groups’ servers in exchange for a fee ranging from $20,000 to $60,000.
“In these … Continue reading Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000
Security researchers at Anthropic and Switzerland’s EPFL have demonstrated that self-propagating payloads can spread from one artificial intelligence (AI) agent to the next through the editable system prompt files that autonomous agent harnesses use to… Continue reading AI “Mind Viruses” Can Spread Between Agents Through Persistent Prompt Files
Security researchers at Anthropic and Switzerland’s EPFL have demonstrated that self-propagating payloads can spread from one artificial intelligence (AI) agent to the next through the editable system prompt files that autonomous agent harnesses use to… Continue reading AI “Mind Viruses” Can Spread Between Agents Through Persistent Prompt Files