-
'GitVenom' campaign uses dodgy GitHub repositories to spread malwareNews Security researchers have issued an alert over a campaign using GitHub repositories to distribute malware, with users lured in by fake projects.
News -
Hackers are on a huge Microsoft 365 password spraying spree – here’s what you need to knowNews A botnet made up of 130,000 compromised devices has been conducting a huge password spraying campaign targeting Microsoft 365 accounts.
News -
The Zservers takedown is another big win for law enforcementNews LockBit has been dealt another blow by law enforcement after Dutch police took 127 of its servers offline
News -
Threat actors are leaning on trusted services more than everNews Cyber threats are increasingly incorporating legitimate services in their attack chain, researchers warn.
News -
Seashell Blizzard hacker group escalating attacks on critical infrastructure, Microsoft warnsNews The BadPilot threat campaign has compromised organizations operating across a raft of critical industries, including energy, telecoms, and manufacturing.
News -
Agentic AI could be a blessing and a curse for cybersecurityNews Agentic AI systems could become a key weapon in the cybercriminal arsenal as the technology matures, according to research from Malwarebytes.
News -
New phishing campaign exploits Microsoft’s legacy ADFS identity solutionNews Researchers at Abnormal Security have warned of a new phishing campaign targeting Microsoft's Active Directory Federation Services (ADFS) secure access system.
News -
Two of the world's largest cyber crime forums knocked offlineNews Two cyber crime forums, Cracked and Nulled, have been taken down as part of a police operation involving international partners.
News -
Hackers are using a new AI chatbot to create malwareNews Researchers at Abnormal Security have warned about the rise of GhostGPT, a new chatbot used by cyber criminals to create malicious code and malware.
News -
Microsoft files suit against threat actors abusing AI servicesNews Cyber criminals are accused of using stolen credentials for an illegal hacking as a service operation
News -
US authorities just purged malware from thousands of devices across the worldNews After taking control of the PlugX malware’s command-and-control server, the coalition were able to trigger a self-delete mechanism to remove the malicious program
News -
Fake CAPTCHA attacks surged in late 2024 – here’s what to look out forNews CAPTCHA pages that trick users into executing malicious commands almost doubled in two months at the end of 2024
News
