Dark Reading (45 minutes ago)
When hand-typed commands failed to breach a US retailer, the attacker turned to AI-generated scripts, achieving lateral movement in minutes.
Read the full story on Dark Reading.
Sales from EU HQ’d vendor rocket in two years. The Trump affect? Yes but NIS2 and DORA are factors too
The attackers accessed chat transcripts for fewer than 1% of Notion workspaces. Most transcripts were unattributable.
Some hunt for bargains, and others for sensitive customer data, new report warns.
The attackers exploited a vulnerability in a legitimate extension to bypass ScreenConnect authentication.
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Multiple threat actors are abusing GSocket, a legitimate open-source remote access tool, to maintain access to Linux servers even after patching the vulnerabilities exploited to gain initial access.
The CCP built a Big Data system to scrape reams of information and learn about individuals abroad, to potentially target and exploit them. Think Alice Huang Lite.
The package adds public-private cyber responders, an AI-focused team run by the economic ministry, and more leeway to use the government’s new active cyber-defense powers.
An organization’s ability to quickly recover from a business disruption will be a competitive advantage in an era of AI-driven threats and business enablement.
The RMM provider also released a hotfix as one of recommended mitigations to address public exploits for the alleged zero-days that allow for attacker takeover.
65 active sources
20 Turkish · 45 English
All sources
