Microsoft has uncovered a new cyber espionage campaign in which attackers are targeting hotel and conference center Wi-Fi networks to steal Microsoft 365 accounts. The company has linked the operation to the Russian state-backed threat group Midnight Blizzard, also known as APT29 or Cozy Bear. According to Microsoft’s threat intelligence team, the campaign has been … Continued
Google has removed three AI workflows from its Agent Development Kit (ADK) Python repository after security researchers discovered a serious vulnerability involving GitHub Issues. The flaw showed that a carefully crafted public GitHub issue could manipulate an AI-powered triage agent into triggering a more privileged code-fixing agent. Although the attack was demonstrated in a controlled … Continued
A major cyberattack has exposed the personal details of more than 100,000 police officers, staff members, and criminal justice professionals across the United Kingdom. The attack targeted the Police National Legal Database (PNLD), an online legal resource used by police forces in England and Wales. Officials confirmed that the breach affected contact information stored within … Continued
Cybersecurity researchers have uncovered new details about the underground business behind the Android BTMOB Remote Access Trojan (RAT), revealing how cybercriminals are making advanced malware available to almost anyone. Instead of requiring technical skills, the operators sell BTMOB as a complete malware package with easy-to-use tools. This business model allows attackers to launch Android malware … Continued
Anthropic has revealed that three of its Claude AI models accidentally gained unauthorized access to the live systems of three real organizations during internal cybersecurity testing. The company discovered the incidents after reviewing more than 141,000 evaluation sessions following a similar AI security event reported by another AI company. According to Anthropic, the problem was … Continued
South Korea’s Personal Information Protection Commission (PIPC) has imposed a fine of 53.979 billion won (around $39 million) on telecommunications giant KT Corporation after finding serious violations of the country’s personal data protection laws. The investigation found that attackers remained inside KT’s internal network for nearly 11 months, from October 8, 2024, to September 5, … Continued
A Chinese cybercrime group known as SilverFox has been linked to a new cyberattack targeting a Japanese manufacturing company. Security researchers found that the attackers used an advanced hacking method called Bring Your Own Vulnerable Driver (BYOVD) to bypass Windows security and secretly install ValleyRAT, a remote access trojan that allows attackers to control infected … Continued
Hackers have launched a new cyber campaign by abusing a security flaw in AnySign4PC, a widely used digital authentication software in South Korea. Instead of directly targeting victims, the attackers first compromised trusted Korean websites and secretly injected malicious code into them. Anyone visiting these websites with a vulnerable version of AnySign4PC installed could become … Continued
A newly disclosed security vulnerability in Gitea has raised serious concerns for organizations that host their own Git repositories. The flaw allows users with normal repository write access to trigger remote code execution (RCE) on the server by planting a malicious Git hook. Security researchers have classified the issue as critical because it can lead … Continued
In a major legal escalation against big tech, Russian authorities have officially filed criminal charges against Telegram founder Pavel Durov. The Federal Security Service announced that Durov is accused of aiding terrorist activities by allowing hazardous content to persist on his messaging platform. Russian security agencies claim Telegram failed to remove specific channels and bots … Continued
