Transparent Tribe targets India, Afghanistan with new malware in Operation RapidRust
A Pakistan-aligned threat group, known as Transparent Tribe or APT36, has been linked to a new wave of cyberattacks targeting government and defense organiza...
general
20 articles
New Rapuncel infostealer campaign uses fake GitHub repos to disable antivirus
The campaign, uncovered by LastPass and Delphos Labs, impersonates LastPass and at least 39 other companies.
BigCommerce alerts merchants of data breach linked to Ribon apps
Ecommerce platform BigCommerce has alerted multiple merchants to data breaches after attackers compromised credentials for third-party Ribon applications and...
Google Fined €403 Million Over Location Data Practices
Ireland’s DPC fined Google €403 million over GDPR violations involving location data, transparency, retention and user control. Ireland’s Data Protection Com...
CISA alerts of active exploitation of three Linux kernel flaws
The U.S.
EU data regulator fines Google more than $460 million for location data violations
Ireland’s Data Protection Commission will fine Google more than €403 million ($462 million) over the tech giant’s processing of location data, concluding an ...
Alexey Tulia at Tech Race Summit: how AI agents are changing engineering leadership
Alexey Tulia, Executive Leader at Coinspaid Dev, discussed the changing role of engineers and CTOs during the AI…
WordPress Click2Shell flaw lets hackers execute PHP on the server
Technical details and a proof-of-concept exploit have been published for a new WordPress cross-site request forgery (CSRF) vulnerability dubbed 'Click2Shell'...
Foreign Hackers Target Two Colorado Water Utilities
Hackers targeted two Colorado water utilities, changing OT settings and disabling alarms, but causing no impact on water services or safety. Foreign hackers ...
Microsoft to retire Microsoft 365 Companion apps in December
Microsoft will retire the Calendar, People, and Files Microsoft 365 companion apps on December 16 and has asked admins to remove them from managed devices. [.
The API was built for applications. What happens when the user is an AI agent?
AI agents need stronger guardrails as they gain authority to take real-world financial actions.
Microsoft Teams to allow admins to customize weaponizable file protection
The upcoming update to Weaponizable File Protection in Microsoft Teams will grant administrators the ability to manually adjust which file types are blocked ...
Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR
A fake LastPass Authenticator installer offered on GitHub installs a Windows kernel driver that shuts off antivirus and other security software before a pass...
CISA recommends cyber decoys to enhance intrusion detection
CISA's guidance addresses the challenge organizations face in detecting adversaries who utilize legitimate credentials and "living off the land" (LOTL) techn...
Google Hit With $463 Million Fine for EU Location Data Rule Breach
Google has been fined 403 million euros ($463 million) for breaching the European Union’s strict privacy rules because it mishandled users’ location data. Th...
Contagious Interview Campaign Compromises 30,000 Devices, Steals $10.71M in Crypto
The North Korean threat actors behind the Contagious Interview campaign have compromised at least 30,000 devices located in more than 100 countries and sipho...
Clop Ransomware Responds to ShinyHunters Amid Eight-Figure Demands
Clop responds to ShinyHunters after its leak site takeover as the group demands an eight-figure payment, interest and a public apology in their escalating feud.
Microsoft resolves incorrect Defender Antivirus alerts
The problem, which surfaced in the Windows Insider program as early as June and was acknowledged by Microsoft in late August, led to erroneous notifications ...
PhantomRaven malware distributed via npm package registry
The malware, likely developed using a large language model, according to CrowdStrike's Counter Adversary Operations, was distributed through typosquatted and...
Google Fined €403 Million Over GDPR Violations Tied to Location Data
Google has been fined €403 million for breaking the EU's data protection law, the GDPR, in the way three of its features handled people's location data from ...