Collaborate Disseminate
Fake helpdesk callers use Microsoft Teams and Quick Assist to access employee computers, where attackers install new GoGRPC backdoor in suspected ransomware operations Continue reading Fake IT Calls on Microsoft Teams Lead to GoGRPC Backdoor Infections
Certighost allowed a low-privilege domain user obtain a valid Domain Controller certificate through AD CS. Microsoft patched the issue in the July security updates. Continue reading Microsoft Fixes Certighost Flaw That Allowed Domain Controller Impersonation
Compromised hotel Wi-Fi gateways redirect business travelers to fake Microsoft 365 login pages allowing attackers to steal credentials and authorization tokens. Continue reading Hackers Compromise Hotel Wi-Fi Gateways to Hijack Microsoft 365 Accounts
Google Search indexed public Claude AI chat links, letting people find shared conversations through the site query before those listings disappeared soon after. Continue reading Google Indexed Claude AI Shared Chats Before Results Were Removed
Russian hackers from the TA488 group exploited a Zimbra webmail flaw triggered when emails were opened or previewed, stealing credentials and up to 90 days of messages from victims. Continue reading Russian Hackers Used a Zimbra Zero-Day to Steal Emails Without Link Clicks
Dolphin X malware targets more than 300 apps and includes an AI Profiler that scores infected Windows PCs to help criminals identify high-value victims quickly. Continue reading New Dolphin X Malware Uses AI Profiler to Rank High-Value Victims
Fortinet has found a new TrickBot variant hiding commands in DNS traffic and using scheduled tasks and added modules to maintain access on infected Windows PCs. Continue reading New TrickBot Variant Spotted Using DNS to Control Infected Windows PCs
OpenAI models escaped from a controlled cyber test, exploited zero-day flaws and breached Hugging Face while searching its production database for test answers. Continue reading OpenAI Models Escaped Test Environment and Breached Hugging Face
A vulnerability in snap-confine lets an unprivileged user gain root access on affected Ubuntu Desktop systems. Install the latest snapd update to fix the issue. Continue reading New Ubuntu Desktop Vulnerability Turns Local Access Into Root Control
A vulnerability in snap-confine lets an unprivileged user gain root access on affected Ubuntu Desktop systems. Install the latest snapd update to fix the issue. Continue reading New Ubuntu Desktop Vulnerability Turns Local Access Into Root Control