1+ mon, 3+ week ago   (422+ words) A Russian-speaking cyber-criminal has been observed moving in three months from posting a jailbreak tutorial on a Russian-language forum to selling a commercial offensive AI pentest platform built on the techniques he documented. According to new research from Cato CTRL,…...

1+ mon, 3+ week ago   (444+ words) A newly identified Windows malware sample that abuses Microsoft Graph API to transform a compromised Microsoft 365 calendar into a covert two-way command and control (C2) channel. Researchers at Group-IB dubbed the highly sophisticated malware sample HollowGraph and attributed it, with high…...

1+ mon, 3+ week ago   (435+ words) A new macOS stealer has been observed pairing the paste-a-command social engineering of a ClickFix lure with a coercion routine that rendered the machine unusable until the victim surrendered their password. According to new research from Group-IB published on June…...

1+ mon, 4+ week ago   (232+ words) After a four-day security suspension, Progress has restored access to its ShareFile Storage Zones Controller. Progress Software detected “a credible external security threat” on July 10 that prompted the company to temporarily suspend the service. The service was resumed on July…...

2+ mon, 6+ day ago   (430+ words) A new cyber threat group linked to the Iranian government has been targeting Israeli government and IT organizations since early 2026, according to Check Point Research. The group, tracked by the Tel Aviv-headquartered cybersecurity firm as ‘Cavern Manticore,’ shares technical overlaps…...

2+ mon, 3+ week ago   (380+ words) A supply chain attack which targeted Mastra, an open-source typescript for building AI-powered applications and agents, was the work of North Korean hackers, cybersecurity researchers have said. The attribution was made on June 19 by Microsoft Defender Security Research Team and…...

2+ mon, 3+ week ago   (467+ words) A cryptocurrency-stealing malware campaign has been spreading by faking its own popularity, dressing up booby-trapped "tools" with bogus GitHub stars, inflated download counts and AI-narrated YouTube tutorials. New analysis from Check Point Research traced the operation to a Rust-based clipboard…...

3+ mon, 1+ week ago   (419+ words) A critical flaw in the open-source AI platform Flowise has been disclosed, along with working proof-of-concept (PoC) code, allowing an attacker to take over a server when a logged-in user simply imports a malicious workflow file. According to new analysis…...

3+ mon, 1+ week ago   (448+ words) A Russian state-linked worm has been observed hiding its components inside a little-used Windows file feature, allowing it to spread across Ukrainian networks while leaving almost no trace on infected machines. According to new analysis from Sekoia, the worm is…...

10+ mon, 6+ day ago   (550+ words) According to the Netskope Threat Labs Statistics, March 2024 set new record numbers in terms of exploitation of legitimate cloud services by opportunistic and state-sponsored threat actors. For the first time in 2024, more than half of all malware delivered from HTTP…...