Targeted
Threat Intelligence

Romanian Hacker Sentenced to Prison in US for Selling Access to State Network

Catalin Dragomir previously pleaded guilty to selling access to an Oregon state government office’s network. The post Romanian Hacker Sentenced to Prison in US ...

5 Steps to Managing Shadow AI Tools Without Slowing Down Employees

When an employee installs an AI writing assistant, connects a coding copilot to their IDE, or starts summarizing meetings with a new browser tool, they are doin...

ROADtools Misused in Cloud Attacks to Steal Tokens and Bypass MFA Controls

A well-known open-source security framework called ROADtools has been turned against the organizations it was originally built to protect. Once a legitimate red...

Lastwall Raises $11.5 Million for Quantum-Resilient Identity Platform

The new funding, led by BDC Capital’s StrongNorth Fund, will accelerate Lastwall’s North American expansion. The post Lastwall Raises $11.5 Million for Quantum-...

Hackers Abuse Trusted Google Domains to Hide Phishing Links From Email Gateways

Phishing attacks are nothing new, but attackers keep finding smarter ways to stay one step ahead of security tools. The latest campaign doing the rounds is a st...

The Credential Crisis: How Stolen Credentials Defeat Modern Security

As AI accelerates phishing, session hijacking, and credential abuse, security teams are racing to close the gap between attacker speed and defensive response. T...

‘SymJack’ Attack Turns AI Coding Agents Into Supply Chain Attack Delivery Systems

Malicious repositories and disguised symlinks can trick AI coding agents into silently installing attacker-controlled MCP servers capable of stealing secrets, c...

GlassWorm Botnet Disrupted

Security firms took down all four command-and-control (C&C) channels used by the GlassWorm malware. The post GlassWorm Botnet Disrupted appeared first on S...

Gitea Vulnerability Exposes Private Container Images without Authentication

Cybersecurity researchers have disclosed a security flaw in Gitea, an open-source, self-hosted platform for version control, that allows unauthenticated remote ...

CISA gives feds 4 days to patch actively exploited cPanel plugin flaw

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given U.S. federal agencies four days to secure their servers against a critical vulnerabil...

LA Metro Cyberattack Linked to Iranian State-Sponsored Hackers

The attack was claimed by a hacktivist group, but evidence showed it used infrastructure linked to Iranian government threat actors. The post LA Metro Cyberatta...

Apple’s New Anti-Snatching Feature Will Auto-Lock iPhones When Stolen From Your Hand

Apple is reportedly developing a new iPhone security feature designed to automatically lock the device the moment it detects a theft-in-progress, a significant ...

Dutch police arrests suspect linked to Ajax football club hack

The Dutch National Police arrested a 35-year-old man suspected of hacking the professional football club Ajax Amsterdam (AFC Ajax) earlier this year. [...]...

Windows 11 KB5089573 update released with performance improvements

Microsoft has released the KB5089573 preview cumulative update for Windows 11 versions 25H2 and 24H2, which comes with 30 changes, including performance and rel...

FBI: Hackers Sending Operatives in Person to Insert USB Drives and Steal Data

The FBI has issued an alert warning of Silent Ransom Group attacks targeting law firms. The post FBI: Hackers Sending Operatives in Person to Insert USB Drives ...

Developer-Targeting Glassworm Malware Abuses npm, PyPI, OpenVSX, and GitHub

A dangerous malware campaign known as Glassworm has been spreading through the tools that software developers trust most every day. By abusing popular platforms...

AI Chatbot Recommendations Redirect Users to Cryptojacking Malware Sites

Microsoft has warned of an active cryptojacking campaign that makes use of artificial intelligence (AI) chatbot interactions as a mechanism for surfacing malici...

Attackers Abuse Open RDP Ports to Gain Initial Access Into Business Networks

There is a decades-old misconfiguration sitting quietly inside countless business networks, and attackers are still making full use of it. Remote Desktop Protoc...

New 0-Click WhatsApp Account Takeover Attack Targeting iOS 16 Users

A new 0-Click WhatsApp Account Takeover Attack Targeting iOS 16 Users is raising serious concerns after multiple iPhone users reported their accounts being hija...

CISA Urges Immediate Patching of Exploited LiteSpeed cPanel Plugin Zero-Day

Resolved last week, the vulnerability was exploited in the wild as a zero-day to execute scripts with root privileges. The post CISA Urges Immediate Patching of...