Google Disrupts ‘Prolific’ and ‘Elusive’ China-Linked Global Hacking Campaign
Malware & RansomwareInfosecurity Magazineil y a 31 jours
UNC2814 hit 53 victims in 42 countries with novel backdoor in decade long cyber espionage operation
Flux RSS
— Sources secondaires308articles RSS
ReinitialiserGlobal Cyber Agencies Urge Immediate Patching of Cisco SD-WAN Zero Day
Gouvernance & RégulationInfosecurity Magazineil y a 32 jours
The US and allies are urging Cisco Catalyst SD-WAN customers to hunt for signs of exploitation
Smashing Security podcast #456: How to lose friends and DDoS people
Gouvernance & RégulationGraham Cluleyil y a 32 jours
When the mysterious operator of an internet archiving-service decided to silence a curious Finnish blogger, they didn’t just send a stroppy email - they allegedly weaponised their own CAPTCHA page to launch a DDoS attack, threatened to invent an entirely new genre of AI porn, and tampered with parts of their own archive to smear the blogger's name. In this episode, we unravel how a website designed to preserve history may have trashed its own credibility - and how Wikipedia responded when trust went out the window. Plus a ransomware gang shoots itself in the foot with a classic case of buffoonery, accidentally corrupting the very keys victims would need to decrypt their data. When even the criminals can’t unlock your files, what happens next? All this, a surprisingly zen Pick of the Week, and a gloriously splenetic rant against web forms, on episode 456 of the award-winning "Smashing Security" podcast, with cybersecurity veteran Graham Cluley and special guest Paul Ducklin.
44% Surge in App Exploits as AI Speeds Up Cyber-Attacks, IBM Finds
Gouvernance & RégulationInfosecurity Magazineil y a 32 jours
IBM's 2026 X-Force report reveals 44% rise in cyber-attacks on public apps, driven by AI and flaws
Malicious NuGet Package Targets Stripe Developers
Threat IntelligenceInfosecurity Magazineil y a 32 jours
Malicious NuGet package mimicking Stripe's library targeted developers
Former Defense Contractor Boss Gets 7+ Years for Selling Zero Days
GénéralInfosecurity Magazineil y a 32 jours
A former general manager of a US defense contractor has been sentenced after selling zero days to Russia
ICO’s £14m Reddit Fine Highlights Age Check Privacy Concerns
Gouvernance & RégulationInfosecurity Magazineil y a 33 jours
The UK’s ICO has fined Reddit over £14m for failing to use children’s personal information lawfully
$10,000 bounty offered if you can hack Ring cameras to stop them sharing your data with Amazon
GénéralGraham Cluleyil y a 33 jours
Amid a privacy backlash, a US $10,000 reward has been offered for anyone who can find a way to run Ring doorbell cameras locally, cutting off the flow of video data to Amazon's servers. Read more in my article on the Hot for Security blog.
Cost of Insider Incidents Surges 20% to Nearly $20m
GénéralInfosecurity Magazineil y a 33 jours
DTEX claims insider incidents cost $19.5m in 2025, with employee negligence most expensive
Multifaceted Phishing Scheme Deceives Bitpanda Customers
Threat IntelligenceInfosecurity Magazineil y a 33 jours
Phishing attack mimicking Bitpanda targets users, harvesting credentials and personal information
North Korean Lazarus Group Expands Ransomware Activity With Medusa
Malware & RansomwareInfosecurity Magazineil y a 33 jours
Ransomware Medusa linked to North Korean hackers targets US healthcare amid ongoing attacks
AI Accelerates Attacker Breakout Time to Just Four Minutes
GénéralInfosecurity Magazineil y a 33 jours
ReliaQuest claims AI has reduced breakout and exfiltration time to under 10 minutes
Chinese AI Firms Hit Claude with Distillation Attacks, Anthropic Warns
GénéralInfosecurity Magazineil y a 33 jours
Anthropic accused DeepSeek, Moonshot and MiniMax of illicitly using Claude to steal some of the AI model’s capabilities
AI-powered Cyber-Attacks Up Significantly in the Last Year, Warns CrowdStrike
Threat IntelligenceInfosecurity Magazineil y a 33 jours
CrowdStrike Global Threat Report warns how adversaries are leveraging AI to make campaigns more efficient and more effective
Shai-Hulud-Like Worm Targets Developers via npm and AI Tools
Malware & RansomwareInfosecurity Magazineil y a 34 jours
Supply chain worm mimicking Shai-Hulud malware spread via malicious npm packages, targeting AI tools has been identified by security researchers
Fraud Investigation Reveals Sophisticated Python Malware
Malware & RansomwareInfosecurity Magazineil y a 34 jours
Sophisticated Python malware uncovered in fraud probe shows obfuscation, disposable infrastructure
Russian Cyber Threat Actor Uses GenAI to Compromise Fortinet Firewalls
Threat IntelligenceInfosecurity Magazineil y a 34 jours
A low-skilled Russian-speaking attacker has used GenAI tools to help deploy a successful attack workflow targeting FortiGate instances
Leading Semiconductor Supplier Advantest Hit by Ransomware Attack
Malware & RansomwareInfosecurity Magazineil y a 34 jours
Advantest, a Japanese specialist in testing computer chips for major semiconductor manufacturers, has deployed incident response protocols following a cybersecurity incident
Jackpotting Surge Costs Banks Over $20m, Warns FBI
GénéralInfosecurity Magazineil y a 34 jours
A new FBI Flash alert claims $20m was lost to ATM jackpotting attacks in 2025 alone
University of Mississippi Medical Center Still Offline After Ransomware Attack
Malware & RansomwareInfosecurity Magazineil y a 35 jours
University of Mississippi Medical Center is still scrambling to respond to a ransomware attack last Thursday