71 article(s) in our index mention this organisation.
Microsoft, in collaboration with Health-ISAC and other partners, disrupted three phishing kit operations – CoGUI (NX/FA), Haozi (Phoenix), and Iron Man System – linked to over one billion scam messages targeting organiza…
A cluster of 16 malicious Firefox extensions, posing as wallet portals and OKX Wallet clones, have been discovered. These extensions steal cryptocurrency wallet recovery phrases and private keys by intercepting wallet im…
Threat actors are leveraging ChatGPT's Custom GPT feature to deceive users into visiting malicious Google Sites hosting ClickFix attacks.
The article outlines six key browser-based attack techniques that are increasingly prevalent and bypass traditional security measures. Attackers are exploiting gaps in email, network, and endpoint security to gain access…
Cloudflare is announcing its intention to become a public Certificate Authority (CA), offering both traditional and post-quantum encryption certificates to ensure website security as computing power advances.
Cloudflare has patched a vulnerability in its Containers and Sandboxes products that allowed a paying customer to access leftover disk data from previous containers.
Microsoft disrupted the EvilTokens AI-powered phishing platform, which had been used to compromise over 12,000 email accounts at 10,000 organizations globally.
Microsoft, in collaboration with partners, successfully disrupted EvilTokens, a sophisticated phishing-as-a-service (PhaaS) platform that facilitated large-scale business email compromise (BEC) attacks targeting Microsof…
Microsoft, in collaboration with several partners, successfully took down EvilTokens, a sophisticated phishing-as-a-service (PaaS) platform utilizing AI to compromise email accounts and facilitate financial fraud. The se…
Microsoft successfully took down ‘EvilTokens,’ an AI-powered cybercriminal platform offering automated fraud support, following a coordinated effort with law enforcement in the U.K. resulting in the arrest of two men. Th…
Brevo, a customer engagement platform, suffered a supply chain attack resulting in malicious code injected into over 100,000 websites. The attackers exploited a vulnerability to gain access to accounts and then used a co…
Three distinct threat groups – NightEagle (APT-Q-95), Hacking Cat, and Toy Ghouls – are actively targeting Russian enterprises with a combination of sophisticated tools, including custom backdoors, ransomware, and wipers…
The NightEagle APT group, active since 2023, has been targeting Russian businesses with a new campaign utilizing the GhostContainer backdoor and various tunneling tools. Initial access is frequently gained through compro…
A multi-platform malware campaign, dubbed BambooToken, is leveraging the MQTT protocol to control Windows and Linux systems, originating from a Chinese threat actor. The malware, active since at least February 2023, util…
The CISA, in collaboration with the FBI and international partners, released an advisory emphasizing the need for more transparent and accountable communication during cybersecurity outages and incidents. The goal is to…
Cisco Talos has identified a sophisticated and ongoing campaign leveraging WebDAV execution to deliver the Amatera stealer. The campaign utilizes a complex chain of loaders and payloads, including ZigCryptoStealer and Ne…
Iranian cyber spies, tracked as Mirage Kitten (UNC1549, Smoke Sandstorm, Nimbus Manticore), are using fake job offers to trick technology specialists in Africa and the Middle East – particularly in aviation, aerospace, a…
Nearly 130 cybersecurity and tech companies, led by OpenAI, have pledged a coordinated global effort to bolster cyber defenses against increasingly sophisticated AI-powered attacks. The initiative focuses on addressing t…
Threat actors are utilizing FTP banner responses as dead drop resolvers to deliver two new remote access trojans, E4del and PINHOLE RAT. E4del, a Node.js-based RAT, employs a dynamic beaconing system to blend in with net…
Researchers have uncovered two denial-of-service (DoS) attacks exploiting how Content Delivery Networks (CDNs) handle HTTP/3 traffic, leading to significant amplification of requests and causing severe performance issues…
