72 article(s) in our index mention this organisation.
Microsoft disrupted EvilTokens, an AI-powered phishing platform used by cybercriminals to target over 10,000 organizations globally. The platform leveraged device code phishing and AI to compromise email accounts, and tw…
Microsoft, in collaboration with partners, successfully disrupted EvilTokens, a sophisticated phishing-as-a-service (PhaaS) platform that facilitated large-scale business email compromise (BEC) attacks targeting Microsof…
Microsoft, in collaboration with several partners, successfully took down EvilTokens, a sophisticated phishing-as-a-service (PaaS) platform utilizing AI to compromise email accounts and facilitate financial fraud. The se…
Microsoft successfully took down ‘EvilTokens,’ an AI-powered cybercriminal platform offering automated fraud support, following a coordinated effort with law enforcement in the U.K. resulting in the arrest of two men. Th…
Brevo, a customer engagement platform, suffered a supply chain attack resulting in malicious code injected into over 100,000 websites. The attackers exploited a vulnerability to gain access to accounts and then used a co…
Three distinct threat groups – NightEagle (APT-Q-95), Hacking Cat, and Toy Ghouls – are actively targeting Russian enterprises with a combination of sophisticated tools, including custom backdoors, ransomware, and wipers…
The NightEagle APT group, active since 2023, has been targeting Russian businesses with a new campaign utilizing the GhostContainer backdoor and various tunneling tools. Initial access is frequently gained through compro…
A multi-platform malware campaign, dubbed BambooToken, is leveraging the MQTT protocol to control Windows and Linux systems, originating from a Chinese threat actor. The malware, active since at least February 2023, util…
The CISA, in collaboration with the FBI and international partners, released an advisory emphasizing the need for more transparent and accountable communication during cybersecurity outages and incidents. The goal is to…
Cisco Talos has identified a sophisticated and ongoing campaign leveraging WebDAV execution to deliver the Amatera stealer. The campaign utilizes a complex chain of loaders and payloads, including ZigCryptoStealer and Ne…
Ransomware groups are increasingly relying on malicious insiders to gain access to organizations, driven by improved defenses making it harder to breach systems directly. As companies bolster their security, attackers a…
Iranian cyber spies, tracked as Mirage Kitten (UNC1549, Smoke Sandstorm, Nimbus Manticore), are using fake job offers to trick technology specialists in Africa and the Middle East – particularly in aviation, aerospace, a…
A Russia-aligned threat actor, UAC-0099, is using a sophisticated tactic – GuardBreaker – to interfere with AI analysis. By inserting a deliberately provocative prompt about creating a nuclear weapon into their VBS scrip…
A debate among security experts, led by Jason Haddix of Arcanum Information Security, highlighted the rapidly accelerating capabilities of frontier AI models and the shifting need for robust security guardrails. Haddix,…
Nearly 130 cybersecurity and tech companies, led by OpenAI, have pledged a coordinated global effort to bolster cyber defenses against increasingly sophisticated AI-powered attacks. The initiative focuses on addressing t…
Threat actors are utilizing FTP banner responses as dead drop resolvers to deliver two new remote access trojans, E4del and PINHOLE RAT. E4del, a Node.js-based RAT, employs a dynamic beaconing system to blend in with net…
Researchers have uncovered two denial-of-service (DoS) attacks exploiting how Content Delivery Networks (CDNs) handle HTTP/3 traffic, leading to significant amplification of requests and causing severe performance issues…
A group of 40 malicious Firefox extensions, disguised as Web3 products like OKX and Rabby Wallet, are stealing user wallet secrets. These extensions, part of a larger campaign dubbed ‘Offside Wallet Theft Factory,’ have…
A new AI platform called ‘Kriminal’ is raising concerns within the cybersecurity community due to its permissive nature and explicit marketing targeting cybercriminals. Despite claims of being for research and educationa…
Researchers have demonstrated a significant vulnerability in Cloudflare Workers, allowing a remote Spectre attack to leak JWTs from co-located Workers at a rate up to 12 bits per second. Despite previous mitigations like…
