Unsophisticated cyber actors are targeting the U.S. Energy sector
Unsophisticated cyber actors are targeting the U.S. Energy sector Pierluigi Paganini May 07, 2025 CISA, FBI, EPA, and DoE warn...
actors
Play Ransomware Exploited Windows CVE-2025-29824 as Zero-Day to Breach U.S. Organization
Threat actors with links to the Play ransomware family exploited a recently patched security flaw in Microsoft Windows as a...
Hackers Exploit Samsung MagicINFO, GeoVision IoT Flaws to Deploy Mirai Botnet
Threat actors have been observed actively exploiting security flaws in GeoVision end-of-life (EoL) Internet of Things (IoT) devices to corral...
New Investment Scams Use Facebook Ads, RDGA Domains, and IP Checks to Filter Victims
Cybersecurity researchers have lifted the lid on two threat actors that orchestrate investment scams through spoofed celebrity endorsements and conceal...
Golden Chickens Deploy TerraStealerV2 to Steal Browser Credentials and Crypto Wallet Data
The threat actors known as Golden Chickens have been attributed to two new malware families dubbed TerraStealerV2 and TerraLogger, suggesting...
Claude AI Exploited to Operate 100+ Fake Political Personas in Global Influence Campaign
Artificial intelligence (AI) company Anthropic has revealed that unknown threat actors leveraged its Claude chatbot for an "influence-as-a-service" operation to...
SentinelOne warns of threat actors targeting its systems and high-value clients
SentinelOne warns of threat actors targeting its systems and high-value clients Pierluigi Paganini April 29, 2025 SentinelOne warns China-linked APT...
SentinelOne warns of threat actors targeting its systems and high-value clients
SentinelOne warns of threat actors targeting its systems and high-value clients Pierluigi Paganini April 29, 2025 SentinelOne warns China-linked APT...
Anthropic Outlines Bad Actors Abuse Its Claude AI Models
Anthropic is the latest AI company to detail how bad actors are abusing its large language models (LLMs) and bypassing...
Hackers Exploit Critical Craft CMS Flaws; Hundreds of Servers Likely Compromised
Threat actors have been observed exploiting two newly disclosed critical security flaws in Craft CMS in zero-day attacks to breach...
North Korean Cybercriminals Disseminate Malicious Software through Bogus Crypto Businesses and Job Opportunity Temptations
Hackers with ties to North Korea responsible for the Contagious Interview scheme have established dummy companies as a means to...
Recent Significant SAP NetWeaver Vulnerability Utilized to Deploy Web Shell, Brute Ratel Framework
Malicious individuals are probably taking advantage of a novel weakness in SAP NetWeaver to transfer JSP web shells in order...
Darcula Incorporates GenAI into Phishing Arsenal, Reducing the Obstacles for Cyber offenders
The malicious individuals responsible for the Darcula phishing-as-a-service (PhaaS) platform have introduced recent enhancements to their cybercrime lineup featuring generative...
Gamma AI Platform Exploited in Phishing Scheme to Fake Microsoft SharePoint Sign-ins
Malicious entities are using an artificial intelligence (AI) driven presentation tool called Gamma in phishing campaigns to lead unaware individuals...
Fortinet Warns Attackers Retain FortiGate Access Post-Patching via SSL-VPN Symlink Exploit
Fortinet has revealed that threat actors have found a way to maintain read-only access to vulnerable FortiGate devices even after...
