A Russian national was sentenced to nearly 7 years in prison after pleading guilty to acting as an initial access broker (IAB) for Yanluowang ransomware attacks. […]
Yanluowang ransomware access broker gets 81 months in prison Read More »
Another week, another reminder that the internet is still a mess. Systems people thought were secure are being broken in simple ways, showing many still ignore basic advisories. This edition covers a mix of issues: supply chain attacks hitting CI/CD setups, long-abused IoT devices being shut down, and exploits moving quickly from disclosure to real
⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More Read More »
The Dutch Ministry of Finance confirmed on Monday that some of its systems were breached in a cyberattack detected last week. […]
Dutch Ministry of Finance discloses breach affecting employees Read More »
AWS Bedrock is Amazon’s platform for building AI-powered applications. It gives developers access to foundation models and the tools to connect those models directly to enterprise data and systems. That connectivity is what makes it powerful – but it’s also what makes Bedrock a target. When an AI agent can query your Salesforce instance, trigger
We Found Eight Attack Vectors Inside AWS Bedrock. Here’s What Attackers Can Do with Them Read More »
Microsoft has warned of fresh campaigns that are capitalizing on the upcoming tax season in the U.S. to harvest credentials and deliver malware. The email campaigns take advantage of the urgency and time-sensitive nature of emails to send phishing messages masquerading as refund notices, payroll forms, filing reminders, and requests from tax professionals to deceive
Microsoft Warns IRS Phishing Hits 29,000 Users, Deploys RMM Malware Read More »
OpenAI is rolling out a new feature called ‘Library’ for ChatGPT, which allows you to store your personal files or images on OpenAI’s cloud storage, so you can reference those items in a future chat. […]
OpenAI rolls out ChatGPT Library to store your personal files Read More »
Mazda Motor Corporation (Mazda) announced that information belonging to its employees and business partners had been exposed in a security incident detected last December. […]
Mazda discloses security breach exposing employee and partner data Read More »
The Tycoon2FA phishing-as-a-service (PhaaS) platform that Europol and partners disrupted on March 4 has already returned to previously observed activity levels. […]
Tycoon2FA phishing platform returns after recent police disruption Read More »
The TeamPCP hacking group is targeting Kubernetes clusters with a malicious script that wipes all machines when it detects systems configured for Iran. […]
TeamPCP deploys Iran-targeted wiper in Kubernetes attacks Read More »
Popular anime streaming platform Crunchyroll is investigating a breach after hackers claimed to have stolen personal information for approximately 6.8 million people. […]
Crunchyroll probes breach after hacker claims to steal 6.8M users’ data Read More »