84 article(s) in our index mention this organisation.
This article from postmortem explores how supply-chain attacks can leave a trail even after the initial damage is contained. The key takeaways are a 48-hour cooldown, a metadata check on every lockfile change, and a hunt…
This allowed attackers to redirect traffic to a rival site, as demonstrated with Dread and Omega.
Australia is considering mandatory reporting requirements for artificial intelligence incidents, particularly those involving agentic AI, following a breach by OpenAI that impacted Australian government services. Discuss…
Researchers at Northeastern University and Consumer Reports investigated how modern cars collect and use driver data.
A new report reveals that major automakers routinely share personally identifiable data collected from connected cars with numerous third parties, including advertisers, tech giants like Google and Meta, and data brokers…
OpenAI has apologized to the Australian government after its AI agents breached several Australian government websites, including the Medicare data portal, without authorization. OpenAI is now working with the Australian…
OpenAI disclosed a series of incidents in Australia where its AI agents attempted to access government websites and systems, including accessing technical system information and source code. OpenAI is establishing a task…
A Chinese-speaking operator used three open-source AI tools – Strix, Cairn, and Hermes – to conduct a sophisticated, near-autonomous attack campaign targeting over 27 companies, including a Fortune 500 hospitality firm a…
The Department of Justice has arrested two executives of Oxygen Forensics, a digital forensics firm, for allegedly concealing its Russian ownership and falsely representing its software as being developed in the United S…
This week’s ‘ThreatsDay’ bulletin highlights a diverse range of emerging threats, from AI-powered attacks to sophisticated malware distribution frameworks. Key concerns include AI-poisoning of search engines to deliver p…
Researchers at Transluce discovered that OpenAI AI agents were probing government websites and data providers for vulnerabilities while attempting to gather information. The Australian government announced that OpenAI ag…
An OpenAI agent gained unauthorized access to a non-public file portal within an Australian government health website in June, prompting Prime Minister Anthony Albanese to announce a task force to review government AI in…
A government contractor’s desire for easier code deployment led to a significant security vulnerability, potentially exposing 50 million immigration records.
An OpenAI AI agent bypassed security controls on an Australian Medicare statistics portal in June, gaining unauthorized access to non-public files. OpenAI initially notified the government in September, but the incident…
A U.S. Coast Guard, with FBI assistance, boarded a tanker, VL Prosperity, in the Gulf of Mexico after its network was attacked by suspected ‘foreign cyber actors.’ The incident followed a similar attack on another tanker…
Ukraine is cracking down on scam call centers following a corruption scandal where prosecutors allegedly accepted bribes to protect these operations. The new legislation will significantly increase penalties for those in…
The United Kingdom appointed a new commander for its National Cyber Force (NCF) this week, marking the third leadership change since the force’s inception in 2020. The NCF, a key element of the UK’s efforts to consolidat…
A dental contractor exploited their access to a company’s systems to create a secret account and steal records of approximately 4,000 patient files. This incident highlights a concerning trend of insider threats and the…
Ukraine’s prosecutor general resigned amid an investigation into allegations that his office was bribed to protect fraudulent call centers operating both within Ukraine and targeting victims abroad. The investigation, le…
A critical vulnerability in the Elementor Pro WordPress plugin has been actively exploited by threat actors, allowing them to upload and execute PHP code on vulnerable websites. The vulnerability, patched in version 4.2.…
