Russia's APT28 behind latest wave of router, DNS attacks
…warns 200 orgs and 5,000 devices compromised so far in Vlad's latest intelligence grab, Microsoft reckons The UK's National Cyber Security Centre (NCSC) has issued a fresh warning about…
Search
Unknown attackers exploit another critical SharePoint bug
…In October, we learned that other Beijing crews – including Salt Typhoon – also joined in the attacks. ® security microsoft cybersecurity and infrastructure security agency cybercrime cyber-crime
Russian crims phish way into Signal and WhatsApp accounts
…a cybersecurity advisory and are assisting affected users in securing their accounts. They also warned that subtle clues can indicate a compromise, such as contacts suddenly appearing twice in a list or…
CPUID hijacked to serve malware as HWMonitor downloads
…CPUID has since confirmed the breach, pinning it on a compromised backend component rather than tampering with its software builds. "Investigations are still ongoing, but it appears that a secondary feature (basically…
Don't open that WhatsApp message, Microsoft warns
…While Microsoft's blog includes several recommendations directing people to use their security products to avoid this type of compromise, one vendor-neutral tip that we especially like involves educating users on…
Lightning-fast exploits mean patch fast, says Cisco Talos
CSO Lightning-fast exploits make it essential to patch fast, ask questions later Here's where you ought to spend your security billable hours budget this year Strengthen your MFA policies, double…
Credential-stealing crew spoofs Ivanti, Fortinet, Cisco VPNs
…remind employees NOT to store workplace credentials in browsers or password vaults secured with personal credentials. ® vpn security microsoft cybercrime cyber-crime
'Several dozen' orgs targeted by a new extortion crew
…UNC6783 primarily compromises call centers and business process outsourcers (BPOs) that work with larger companies - an attack method popularized by groups like Scattered Spider and ShinyHunters . Once the criminals have access to…
AI-pwned: Vercel breach traced to stolen employee creds
…In a public update following the incident, Guillermo Rauch reckons the intrusion began with a compromised employee account linked to Context.ai. An attacker used that access to hijack the employee's…
Meta, cops deploy AI and handcuffs in scam crackdown
Cyber-crime Meta, international cops use handcuffs and AI to stop scammers 150k accounts nuked, 21 suspects arrested Not every scam starts with malware or a compromised account. Sometimes all it takes…