> TODAY'S SUMMARY (2 articles)
Today's cybersecurity news highlights significant developments in cybercrime and high-profile hacking incidents. Authorities have seized the domain of Virtualine, a prominent bulletproof hosting provider that facilitated cybercriminal activities, accounting for nearly 20% of illicit traffic tracked this year. Meanwhile, a new report suggests that Jared Kushner’s iPhone was allegedly hacked twice, involving both Dutch intelligence and Russian hackers, raising concerns about the security of personal devices among prominent figures. These events underscore the ongoing threats posed by organized cybercrime and the vulnerabilities of even high-profile individuals to sophisticated hacking attempts.
|
// AI-powered summary generated at 04:00
USN-8733-1 fixed vulnerabilities in Gzip. This update provides the
corresponding fix for Gzip on Ubuntu 14.04 LTS, Ubuntu 18.04 LTS and Ubuntu
20.04 LTS.
Original advisory details:
Michał Majchrowicz and Marcin Wyczechowski discovered that Gzip's gzexe
utility created temporary files in an insecu...
China’s AI darling goes on the defense after engineer highlighted Grok-esque security flaws
Available on Telegram for a $1,500 initiation fee and a recurring monthly $500 subscription, EvilTokens provided cybercriminals with artificial intelligence tools enabling them to compromise accounts, analyze breached inboxes and find the best methods for monetizing their access through fraud.
Researchers say another looming threat hangs over some of America's most important critical infrastructure.
Why screenshots alone may not be enough: ProofSnap founder Radim Motycka explains how hashes, timestamps, WARC, network artefacts and independent verification can strengthen the preservation of web evidence.
Following a series of chaotic agentic hacks, Trump and administration officials have consistently expressed fears of Chinese AI dominance in pushing for fewer regulations.
The post Citing China, President Trump doubles down on hands-off approach to AI regulation appeared first on CyberScoop.
ZATAZ repère des arnaques à la facture électronique, entre faux portail, logo officiel et pièges liés à la réforme.
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
Tests found that some cheap smart glasses can be hijacked over Bluetooth, exposing their owners’ photos, videos, and personal data.
Several security issues were fixed in the Linux kernel.
EvilTokens has quickly become one of the top PhaaS platforms, enabling device code phishing attacks through AI-assisted lures, automated infrastructure, and token theft. In collaboration with partners, Microsoft Digital Crimes Unit (DCU) facilitated a disruption of EvilTokens infrastructure and oper...
The popular phishing-as-a-service platform used AI throughout the attack chain, allowing cybercriminals to steal tokens for account takeover and business email compromise.
The post Microsoft and partners disrupt EvilTokens, a comprehensive cybercrime service for financial fraud appeared first on Cyb...
Used by crims to compromise 12K+ email inboxes across 10K+ global orgs
The EvilTokens platform that compromised more than 12,000 Microsoft accounts at over 10,000 organizations has been disrupted in an effort led by Microsoft's Digital Crimes Unit (DCU). [...]
SPONSORED FEATURE: AI agents may be unpredictable. Who they are, what they can do, and who owns them shouldn’t be.
Chinese artificial intelligence company Z.ai had to disable several features of its ZCode coding assistant this week after a default setting was caught sending users’ local code repositories to Alibaba Cloud servers in China without their consent, raising fresh concerns for en...
The Wordfence Threat Intelligence Team identified an interesting malware sample in mid June during a site clean. TThe malware was installed as a must-use plugin with several self-healing mechanisms in place in order to survive removal
The post Inside a Malicious, Stealthy WordPress Must Use Plugin a...
On Friday, Xavier talked about the newly introduced HTTP Query method. This new method was introduced to allow "GET" requests that include a body. The main reason for this was that GET requests typically do not contain a body. But what if they do?
Why hiding your Wi-Fi network name does more harm than good, and what actually does make your home network more secure.