> TODAY'S SUMMARY (195 articles)
Today's cybersecurity landscape highlights several critical trends and threats. Vanderbilt University is recovering from a cyberattack, with claims of stolen data yet to be confirmed. The Qilin ransomware group has reportedly targeted over 365 organizations in recent months, emphasizing the growing threat of ransomware affiliates. A significant number of vulnerabilities were addressed in Microsoft's November Patch Tuesday, including a zero-day flaw in Outlook that is actively exploited. Furthermore, recent reports indicate that hackers are leveraging AI tools for credential theft and impersonation fraud, raising concerns about the security of AI systems. Lastly, vulnerabilities in Cisco BroadWorks and Openwave systems are being actively exploited despite available patches, illustrating the ongoing challenge of timely vulnerability management.
|
// AI-powered summary generated at 20:00
We just launched something we've wanted to do for a long time.
The post Best of the Worst: Weekly Phishing Attack Recap | IRONSCALES appeared first on Security Boulevard.
The European Union's top executive body has confirmed a cyberattack after hackers reportedly stole reams of data from the European Commission's cloud storage.
The parliamentary report warns that hostile actors are conducting sustained and increasingly sophisticated campaigns to interfere in democratic processes, exploiting divisive issues to amplify tensions and influence public debate.
The FBI said it was aware of hackers targeting Patel’s personal email, and that no government information was taken.
The post Iranian hackers, Handala, claim to compromise FBI Director Kash Patel’s personal data appeared first on CyberScoop.
Lloyds Banking Group has identified the glitch that led to some of its customers being able to see details of other customers’ transactions on March 12.
It revealed the information in a letter to the UK Parliament’s Treasury Committee, setting out the details of the inciden...
Apple is now sending Lock Screen notifications to iPhones and iPads running older versions of iOS and iPadOS to alert users of web-based attacks and urge them to install the update.
The development was first reported by MacRumors.
"Apple is aware of attacks targeting out-of-date iOS software, includ...
Iran-linked threat group Handala hacked into the personal email account of FBI Director Kash Patel, posting photos of him and links to documents found in the account. The DOJ confirmed the attack, which the bad actors said was in relation for the FBI's seizure of several of its data leak websites a...
Kevin Mandia, Morgan Adamski, and Alex Stamos tell CyberScoop that AI is finding bugs faster than anyone can fix them, exploit development is accelerating, and most organizations aren't prepared for what's coming.
The post Security leaders say the next two years are going to be ‘insane’ appeared fir...
An FBI spokesperson told Recorded Future News that the information is “historical in nature and involves no government information,” adding that the agency has “taken all necessary steps to mitigate potential risks associated with this activity."
TeamPCP, the threat actor behind the supply chain attack targeting Trivy, KICS, and litellm, has now compromised the telnyx Python package by pushing two malicious versions to steal sensitive data.
The two versions, 4.87.1 and 4.87.2, published to the Python Package Index (PyPI) repository on March...
A large-scale campaign is targeting developers on GitHub with fake Visual Studio Code (VS Code) security alerts posted in the Discussions section of various projects, to trick users into downloading malware. [...]
The group that it was making available for download emails and other documents from Patel’s account.
The post Pro-Iranian Hacking Group Claims Credit for Hack of FBI Director Kash Patel’s Personal Account appeared first on SecurityWeek.
Apple’s Hide My Email feature, long promoted as a privacy safeguard for consumers, has come under scrutiny following a federal investigation that revealed how easily anonymized identities can be uncovered through legal channels. Newly disclosed court records show that Apple provided authorities wit...
BreachForums se fracture en héritages rivaux, clones et récits concurrents dans une guerre de succession cyber.
Push Security has uncovered a new AiTM phishing campaign targeting TikTok for Business accounts using Google and TikTok themed login pages
Handala, a pro-Iranian hacking group allegedly working for Iran’s government, published emails it said were taken from the Gmail account of FBI director Kash Patel.
In 1966, an MIT computer scientist named Joseph Weizenbaum built a chatbot called ELIZA. It was extremely simple by today’s standards which simply rephrased whatever you typed as a question. Tell it “my boyfriend made me come here” and it would respond “your boyfriend made you come here?” It was no...
Grok — which is owned by Elon Musk’s xAI — will be forced to pay damages of €100,000 ($115,000) a day if it does not comply, according to the ruling.
A new AITM phishing campaign targets TikTok Business accounts to hijack them for malvertising, continuing tactics seen in earlier Google-themed scams. Push Security researchers uncovered a new wave of AITM phishing pages targeting TikTok for Business accounts, aiming to hijack them for malvertising....
CIAM is the technology layer that decides how your customers log in, what they can access, and how their data is protected. Here's a complete breakdown of what it is, how it works, and why it's become a $14 billion market.
The post What Is CIAM? A Complete Guide to Customer Identity and Access Manag...