Collaborate Disseminate
Attackers whose methods line up with the data-extortion group ShinyHunters have spent the past year walking into corporate Salesforce environments without exploiting a single flaw in the platform.
The way in has been the trust the organizati… Continue reading Microsoft Maps Year-Long ShinyHunters-Linked Salesforce Data Theft Across Three Paths
Cybersecurity researchers have flagged a new macOS information stealer called CrashStealer that’s capable of harvesting sensitive data from compromised systems.
Unlike other information stealers that are built on AppleScript droppers or Objective-C-ba… Continue reading CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks
Google and Microsoft have pulled ModHeader, a popular header-editing extension with roughly 1.6 million installs across Chrome and Edge, after researchers found a hidden browsing-history collector built into its official store version.
The collector w… Continue reading Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found
Somewhere right now, a security tool is quietly finding bugs faster than any human can fix them. That’s supposed to be the good news. The catch is that the attackers have the same tools, pointed the other way, and they don’t file tickets.
That’s the s… Continue reading ⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More
Give an AI assistant a memory and access to your inbox, and you hand an attacker a way to rewrite what it thinks it knows about you. A single email can trick that agent into saving a false “fact” about the user, hide the change, and quietly steer its a… Continue reading New MemGhost Attack Plants Persistent False Memories in AI Agents Through One Email
A new phishing-as-a-service (PhaaS) operation called Forg365 is using a combination of device code phishing, adversary-in-the-middle (AitM) tactics, antibot evasion, artificial intelligence (AI)-assisted lure creation, and post-compromise mailbox opera… Continue reading Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft
Meta has filed a patent application for an AI that listens to your voice throughout the day, works out how it thinks you are feeling from the way you sound, and keeps a timestamped log of every read.
Each read gets pinned to the moment it happened: th… Continue reading Meta Files Patent for AI That Can Listen All Day and Track How You’re Feeling
A few days ago, I was sitting with the CISO of a Fortune 50 company, walking through how his security team was thinking about AI agents in the SOC. Smart team. Serious program. They had already connected Claude to a few detection tools and were seeing … Continue reading Thinking Fast and Slow in the SOC: The Case for Combining Autonomous AI with Analyst Copilots
Cybersecurity researchers have flagged an intrusion in which an unknown threat actor leveraged a vibe-coded PowerShell script for Active Directory (AD) enumeration.
“The script looked for the Domain Controller (DC) and mapped users, computers, and dom… Continue reading Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory
An attacker running a live Microsoft 365 phishing operation left a Python web server listening on a public port with directory listing switched on. The command that did it: python3 -m http.server 8080, was still sitting in the readable .bash_… Continue reading Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365