1+ hour, 1+ min ago   (625+ words) A Russian state-sponsored APT is behind a recent credential theft campaign mounted via hacked public Wi-Fi gateway appliances at organizations running captive portal networks, Microsoft reports. The campaign was flagged roughly a week ago by ReliaQuest, which noticed that hackers…...

3+ day, 22+ hour ago   (864+ words) Researchers warn that AI could turn dangling DNS takeovers into a nation-state weapon capable of disrupting governments, banks and global supply chains. A ‘dangling DNS takeover’ is a known attack method that allows a bad actor to take over a…...

4+ day, 37+ min ago   (507+ words) Claroty has analyzed 750,000 cyber-physical systems across some of the world’s largest data center facilities. Nearly one in five of the cyber-physical systems (CPS) that keep the world’s largest data centers running sits just a single network connection away from pathways…...

6+ day, 1+ hour ago   (618+ words) The new two-word naming convention uses a memorable term utilized in public reporting and a cluster-categorization word. Google has announced that Google Threat Intelligence Group (GTIG) is adopting a new cryptonym-based naming convention for tracking threat actors. According to the…...

6+ day, 23+ hour ago   (493+ words) A threat actor has been using the compromised appliances to target the Microsoft 365 accounts of traveling corporate employees. A threat actor has been hacking public Wi-Fi gateway appliances at organizations running captive portal networks to compromise the Microsoft 365 accounts of…...

1+ week, 4+ day ago   (724+ words) Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge. The attack began with an unsolicited call from someone claiming to represent my wireless carrier. The phone number was not flagged as suspicious, and…...

1+ week, 5+ day ago   (681+ words) Part of a larger toolkit, HollowGraph uses a compromised 365 account’s calendar as a two-way dead-drop. A recently discovered piece of malware abuses the Microsoft 365 calendar for command-and-control (C&C) communication, Group-IB reports. Dubbed HollowGraph, the malware is believed to be part…...

2+ week, 3+ day ago   (712+ words) AI infrastructure introduces new security risks that traditional data center designs were never built to handle. The use and reliance on AI is the biggest single growth area in technology. But AI is enormously energy-intensive and requires a new quality…...

2+ week, 5+ day ago   (619+ words) AI security firm Manifold says two vulnerabilities it reported to Anthropic in May remain exploitable in the latest version of Claude for Chrome, the company’s agentic browser extension. According to Manifold, the flaws let a malicious browser extension trigger Claude…...

3+ week, 3+ day ago   (559+ words) Hackers exploited a zero-day vulnerability in a third-party system to access a KDDI email system for ISPs. Japanese telecommunications giant KDDI this week confirmed that over 12 million people were affected by a June data breach. The incident occurred on June…...