Cybercrime
Search engine criminalisation: SEO poisoning campaign exposed
Scammers are buying up dodgy websites on underground marketplaces to manipulate search rankings and lure victims onto malicious pages.
Cybersecurity
Cybersecurity
Scattered Spider moves on from retail, sinks its fangs into insurance
"The industry should be on high alert, especially for social engineering schemes which target their help desks and call centres."
Security
"An AI obedience problem": World's first LLM Scope Violation attack tricks Microsoft Copilot into handing over data
Zero-click bug requires "no specific user interaction and results in concrete cybersecurity damage", researchers allege.
Security
Organic panic as top Whole Foods supplier becomes latest victim of retail hackers
United Natural Foods (UNFI) discloses a security incident and outage that's threatening expensive organic food supply chains across the US.
Cybersecurity
Cartier and North Face cyberattacks: Retailers hit as threat actors "smell blood in the water"
Hackers target a pair of new victims after blitzkrieg against famous high street brands including M&S, Harrods and the Co-op.
AI
Degenerative AI: ChatGPT jailbreaking, the NSFW underground and an emerging global threat
Find out how smuthounds are tricking GenAI models into producing x-rated content and why their techniques pose a major risk to enterprises.
Cyberwarfare
“The keyboard is a weapon of war”: UK loads up offensive cyberwarfare capabilities
Britain's state-sponsored threat actors will take the fight to Russia in digital operations backed up by nuclear and conventional firepower.
Cybersecurity
Chinese threat actors use Google Calendar to attack US government targets
The notorious APT41 group snuck a malware payload onto official websites and hid stolen data inside Calendar events.
Apple
Apple reveals the shocking true extent of App Store fraud
"Preserving a safe and secure marketplace requires constant vigilance, as bad actors continue to evolve their tactics."
Opinion
Identity and resilience: Navigating the DORA compliance maze
"Combatting ICT risks associated with overprovisioned identities must be a top priority in order to properly secure financial services firms."
Security
Fake Kling AI ads are stealing Facebook users' personal data
"From deepfake scams to impersonation attacks, the rising trust in AI-powered platforms has created new openings for cyber criminals."
Cybersecurity
Scattered Spider breaks America: High Street hackers sink fangs into US retailers
Group linked to the blockbuster M&S cyberattack is now believed to be targeting retailers on the other side of the Atlantic.