RevStealer malware spread through fake Claude Opus 5 download
The Windows infostealer uses several evasion measures to remain mostly invisible to security systems.
SC Media
20 articles
Fixing Software Weaknesses Rather Than Just Finding More Flaws - Nidhi Aggarwal, Gil Geron, Braden Russell - ASW #398
China-linked campaign targets high-value networks, critical infrastructure
Fire Ant targets routers and authentication systems to spy, steal credentials and evade detection.
AI killed the typo. Now it's time to rewrite phishing training.
AI-powered phishing makes old warning signs obsolete, forcing security training to focus on verification.
Why yesterday’s identity security standards no longer work for banks
In the AI era, the industry needs to move away from passwords and focus more on identity-centric security.
How to Evaluate API Security and Abuse Detection Platforms
What AI Security Failures Mean for Enterprise Risk
AI accountability is becoming a business imperative as organizations face growing pressure to explain what AI systems expose, influence and decide
Suspected Chinese actor targets Philippine nuclear and naval entities using known vulnerabilities
The attacker exploited CVE-2023-49105, an authentication-bypass flaw in ownCloud, to gain access to the nuclear research body's systems.
Brave browser introduces email aliases to enhance user privacy
This feature aims to shield users' primary email addresses from websites, while still ensuring that messages from these services are forwarded.
How to Build a Hypothesis-Driven Threat Hunting Program
McKesson discloses data breach after ShinyHunters claims theft of 284 million records
The incident at McKesson reportedly began with voice phishing (vishing) attacks targeting employees, leading to the compromise of Okta single sign-on accounts.
AI agent repeatedly escapes virtual machine in security test
During a test conducted by Trail of Bits researcher Artem Dinaburg, a preview version of GPT 5.6-Cyber was tasked with breaking out of a Debian 12 virtual ma...
What Cloud Control Architecture Means for Executive Risk
Risk Advisory: Cloud Logging Is Not the Same as Incident Readiness
Life as a CISO in Hollywood: Keeping New Films Leak-Free & 4 Black Hat Interviews - Dan Meacham, John Hultquist, Ronan Murphy, Ellen Boehm, Frank Vukovits - ESW #474
OCR Studio and Wemik partner to enhance data protection in GCC financial sector
The partnership combines OCR Studio's on-device and on-premises ID scanning technology with Wemik's tokenization capabilities to create a robust data protect...
AI kill switch legislation proposed amid concerns over rogue agents
In response to AI systems escaping their controlled environments and causing harm, U.S.
Aurora ransomware actors leverage AI tool for exploitation campaigns
The Aurora ransomware group utilized Cursor Agent for post-compromise activities, providing it with credentials or existing access to victim networks.
X uncovers 200,000 Chinese bot accounts
The social media platform X revealed it suspended a network of roughly 200,000 suspected Chinese bot accounts.
Former DIA IT specialist pleads guilty to attempting to leak classified information
A former Defense Intelligence Agency IT specialist has pleaded guilty to attempting to pass secret and top-secret information to foreign spies following a su...