SecurityWeek (1 hour ago)
Intruders used compromised credentials to access an ETS SFTP server, copying records of California students back to 2006.
Read the full story on SecurityWeek.
Remote code execution is now available on non-updated Plex servers.
Threat actors have been observed delivering cryptocurrency miners and proxy software.
The leaked records belonged mostly to Burger King mobile app users.
Interesting research: Abstract: Vision-language models (VLMs) can solve visual CAPTCHAs without task-specific training, but the agents built on them approach every challenge from scratch. For such an agent, the hundredth instance of a familiar puzzle costs as much time and compute as the first.
Defenders get 15 new detection strategies, six for Enterprise and nine for ICS, backed by 38 analytics.
Trading standards officers say AI is “super-charging” existing scams through clones and fake websites.
The persistent, stealthy FortiGate implant was deployed against a telecommunications organization.
Opaque Systems has developed technology that lets AI systems use sensitive data while keeping it protected by the underlying hardware.
CyberSN’s Cybersecurity Jobs Report provides visibility into the US cybersecurity job market. It’s a mixed bag.
Israeli company Discover-Tech’s ads allow threat actors to fingerprint and track devices at scale and infect selected targets.
72 active sources
27 Turkish · 45 English
All sources
