Fake ‘Leonardo DiCaprio’ Torrent Spreads Agent Tesla Malware
A fake Leonardo DiCaprio movie torrent is spreading Agent Tesla malware through trusted Windows tools The post Fake ‘Leonardo DiCaprio’...
Social Engineering
Smashing Security podcast #447: Grok the stalker, the Louvre heist, and Microsoft 365 mayhem
On this week’s show we learn that AI really can be a stalker’s best friend, as we explore a strange...
Smashing Security podcast #446: A hacker doxxes himself, and social engineering-as-a-service
A teenage cybercriminal posts a smug screenshot to mock a sextortion scammer… and accidentally hands over the keys to his...
DoorDash Hit by Cybersecurity Breach, Millions of Users Potentially Exposed
Image: mohdizzuanbinroslan/Envato Food delivery operator DoorDash has been hit by another data breach, with millions of users across the US,...
Google Uses Courts, Congress to Counter Massive Smishing Campaign
Google is taking a multi-pronged approach to stopping a widespread global smishing operation that targeted more than a million...
Why AI Red Teaming is different from traditional security
“72% of organizations use AI in business functions — but only 13% feel ready to secure it.” That gap,...
How AI-Generated Content is Fueling Next-Gen Phishing and BEC Attacks: Detection and Defense Strategies
With over 25 years of experience in cybersecurity and hundreds of incident response cases across UK businesses, I’ve witnessed the most dramatic shift in attack sophistication to date. AI phishing attacks have fundamentally reshaped the threat landscape, with attackers now using natural language models to craft emails that even experienced...
Generative AI: The Double-Edged Sword of Cybersecurity
The AI hacking era is here – and it’s reshaping the human risk landscape as we know it. With...
Hackers Targeting Freight Operators to Steal Cargo: Proofpoint
Hackers are working with organized crime groups to target trucking and logistics companies with remote access tools to steal...
In an AI World, Every Attack is a Social Engineering Attack
An on-call IT worker receives an urgent call from the CEO requesting an MFA reset. The IT worker grants...
US Defense Contractor Boss Sold Zero Days to Russia — Cops a Plea
Peter Williams admits to selling unpatched iPhone bugs to a shady Russian broker.The former head of L3Harris’s Trenchant “offensive cyber”...
Russia’s Coldriver Ramps Up Malware Development After LostKeys Exposure
Google threat researchers in May disclosed LostKeys, a malware used by the Russia state-sponsored cyber-espionage group Coldriver, which has...
Retail Cyberattacks Reveal Hidden Weaknesses In Supply Chain Security
The recent arrests of four suspects linked to cyberattacks on major UK retailers like Marks & Spencer, Co-op and...
Phishing Scams Weaponize Common Apps to Fool Users
From false PDFs to false customer support calls and malicious advertisements, phishing scams use urgency and trust to pilfer...
#Pixnapping: Android Timing Attack Sends Google Back to the Drawing Board
Researchers discover a new way to steal secrets from Android apps.Anything any Android app can display is vulnerable to the Pixnapping...
