Massive password spray attack targets Azure CLI, bypasses MFA
The attack, which leveraged a deprecated OAuth flow called Resource Owner Password Credentials (ROPC), made over 81 million login attempts between June 12 an...
SC Media
20 articles
Aikido Security acquires Root.io to enhance open-source software patching
Root.io offers agentic vulnerability remediation, utilizing AI agents to research, write, test, and deploy patches for newly published vulnerabilities within...
Critical Langflow vulnerability exploited to deploy Monero cryptocurrency miner
The attack chain begins with a single line of Python code executed via an unauthenticated Langflow API endpoint.
‘Interpol’ emails spread custom ransomware with decryption key left inside
The campaign targets small businesses with fearmongering emails.
Malicious browser extension targets cryptocurrency users with wallet address swapping
The "Google Notes" extension, identified by McAfee researchers, operates by requesting broad permissions, including access to all websites, browsing history,...
Apple releases early security updates, citing AI-driven exploit acceleration
The updates address critical flaws in WebKit, the rendering engine for Safari and other applications on Apple devices.
Cybersecurity professionals cite agentic AI, LLMs, and cloud infrastructure breaches as top concerns
The Bitdefender 2026 Cybersecurity Assessment Report surveyed over 1,200 professionals across six countries.
Major Russian-language cybercrime forum XSS.is shut down, alleged admin arrested
Europol coordinated the operation, dubbed Ratatouille, which dismantled XSS.is, a forum with over 50,000 members.
New phishing-as-a-service platform ARToken offers advanced BEC capabilities
ARToken operates as an affiliate of the EvilTokens phishing-as-a-service operation, which targets Microsoft 365 accounts and bypasses multi-factor authentica...
Ousaban banking trojan targets Spain and Portugal with new stealth techniques
The Ousaban campaign begins with a phishing PDF disguised as a corrupted file, prompting users to click an "Update" button.
Huntress CEO addresses insider threat claims amid employee-cybercriminal communication
The controversy surfaced when former Huntress analyst Ben Folland alleged that a current employee disclosed law enforcement inquiries to Devman, a ransomware...
CIA reorganizes to embrace AI and quantum computing
The CIA has reorganized key acquisition and technology directorates to prioritize emerging technologies such as AI and quantum computing.
Shell injection flaw found in 10 of 11 open-source AI agents
The GuardFall vulnerability stems from a fundamental mismatch between how security filters inspect commands and how the Bash shell interprets and executes them.
ScreenConnect abused to deploy AsyncRAT in widespread campaign
This activity is part of a large, multi-language campaign that distributes malicious installer archives hosted on spoofed websites, according to a recent rep...
DHS revives critical infrastructure cybersecurity information sharing program
ANCHOR-CI will serve as a forum for federal, state, local, tribal, and territorial government representatives to engage with private sector entities and crit...
US DOJ seizes nearly 400 domains used for illegal World Cup streaming
The US Justice Department's Criminal Division, in coordination with the International Computer Hacking and Intellectual Property (ICHIP) network, took down t...
Progress Kemp LoadMaster vulnerability actively exploited
The operating system command injection flaw, with a CVSS score of 9.6, enables unauthenticated attackers to execute arbitrary commands on the LoadMaster appl...
Exabeam expands security platform to monitor AI agents
The new features aim to flag anomalous interactions between humans and AI agents, as well as unauthorized autonomous activity.
Microsoft Teams enhances bot protection with human verification
The new technology acts like a security guard, requiring a human user to verify the identity of bots in the meeting lobby before the session begins.
Norton's scam detection tool now available in Claude and ChatGPT
Norton Genie can analyze suspicious emails, texts, messages, images and links using multi-layered detection intelligence.