Hacking News Cyber Attack News
Dolphin X uses AI profiling to find high-value victims. The Feds warn of Iranian agents targeting OT systems. Moving from isolated, technical data to a continuous risk lifecycle can help organizations align security controls with actual business consequences. Barry Childe has joined data sciences tech company Datavault AI as Chief Information Security Officer. A researcher has explained how an attacker could exploit these vulnerabilities to target industrial organizations. The https://livechinanews.com/economics PEAR ransomware group claimed to have stolen 3 TB of information from the medical business management company.
- The malware-as-a-service operation launches legitimate browsers on an invisible desktop, giving attackers persistent and covert remote access to compromised Windows systems.
- Agentic artificial intelligence is creating enough risks for organizations to demand a security reframe.
- Swiss cybersecurity company PRODAFT is tracking the centrally administered RaaS operation under the name Funky Mantis .
- Confiant’s analysis documents the delivery, not execution of the file inside the browser, and does not establish whether the fina…
- A malvertising operation dubbed SourTrade is making victims’ browsers build the final Windows executable themselves, using a legitimate Bun runtime as its base instead of serving one complete malicious file from a fixed URL.
- “A single link could hijack OpenAI’s ChatGPT Agent Builder to stand up an attacker-controlled AI agent with a real employee’s access and its approvals switched off,” the AI security company said in a two-part report shared with The Hacker News.
Apple’s Biome framework is drawing fresh attention after researchers identified 84 data streams that can preserve detailed records of how an iPhone is used…. Microsoft is preparing to transition its enterprise Windows activation from a software-trust model to one based on verified hardware. Iranian-affiliated hackers are targeting internet-connected industrial controllers used across critical infrastructure in the United States. The Vatican’s official Click to Pray app has exposed the personal information of more than 700,000 users through an unauthenticated API flaw.
According to a new analysis by Proofpoint, Cruciferra has been utilized by various unrelated cybercriminal threat clusters to deliver a wide array of remote access trojans (RATs) and information stealer malware. “The victim was directed through compromised web infrastructure to a counterfeit Microsoft Store page claiming that Microsoft Teams had to be updated before the shared document could be opened,” ZeroBEC said in a report published last week. Criminals are using violence, threats, home invasions, and kidnapping attempts to force victims to unlock wallets…
GrapheneOS defends security model after US prosecutors target user
As AI-generated code becomes commonplace, CISOs need new audit strategies to measure developer practices, govern AI tool usage, and identify software risks before they reach production. Legacy systems, safety concerns, and critical infrastructure risks make OT vulnerability disclosure one of cybersecurity’s most challenging balancing acts. AgentForger allows an attacker to create, insert and remotely control an invisible autonomous AI agent inside a victim organization. The company has raised a total of $49 million in funding, including from Battery Ventures, Accel and Foundation Capital. A threat actor has been using the compromised appliances to target the https://repaircanada.net/social-media-marketing-trends-in-advertising-and-website-maintenance-for-businesses.html Microsoft 365 accounts of traveling corporate employees. The company plans to expand its research team, open new offices in Rome and San Francisco, and acquire new clients.
- The company plans to expand its research team, open new offices in Rome and San Francisco, and acquire new clients.
- A chain of vulnerabilities in the Adobe Acrobat Chrome extension could have allowed attackers to steal content from a victim’s …
- For years, phishing campaigns targeting financial institutions followed the same playbook.
- Barry Childe has joined data sciences tech company Datavault AI as Chief Information Security Officer.
The attack occurs when an unsuspecting employee clicks open a benign-looking ChatGPT link, causing it to spawn a new AI agent within the company’s trust boundary that does the attacker’s bidding. “A single link could hijack OpenAI’s ChatGPT Agent Builder to stand up an attacker-controlled AI agent with a real employee’s access and its approvals switched off,” the AI security company said in a two-part report shared with The Hacker News. The vulnerability has been codenamed AgentForger by Zenity Labs. Cybersecurity researchers have disclosed a critical vulnerability in OpenAI’s ChatGPT Workspace Agents that could have allowed a single phishing link to stealthily build, authorize, and deploy an autonomous artificial intelligence (AI) agent inside a victim’s organization. The chain also required an Enterprise CA that followed the vulnerable chain path, enrollment through t…
macOS flaw lets malware replace trusted apps without security warnings
The “Cyber Newsroom Feed” module is a live feed of the latest cyber news enriched with CVE and vulnerability data. Attendees will be able to interact with leading solution providers and other end users facing similar challenges in securing a variety of cloud deployments. Analysis found 434 exploitable flaws in AI-generated apps, with denial-of-service, authorization and secrets exposure risks among the most common issues.
TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments
Cybersecurity researchers have flagged a Microsoft Teams-themed phishing campaign that employs “secure document” lures to deliver legitimate remote monitoring and management ( RMM ) tools. Administrators should update rather than rely on n8n’s interim guidance to restrict instance access and workflow editing to fully trusted users. Infostealer malware has quietly become the single most important…