Cybersecurity
Cost of a data breach hits historic all-time high in the US, drops globally: IBM warns of growing shadow AI risk
"AI is accelerating across the enterprise, but the security and governance needed to protect it aren’t keeping pace."
Cybersecurity
Cybercrime
The rise of Dark LLMs: DDoS-for-hire cybercriminals are using AI assistants to mastermind attacks
Lawbreaking language models lower the barrier of entry for unskilled crooks and make it frighteningly easy to launch crime campaigns.
Security
Microsoft blames China for SharePoint ToolShell attacks, governments and nuclear weapons agency targeted
Fear turned to panic as scary 9.8 CVSS vulnerability came under active exploitation by bad guys including nation-state attackers.
Ransomware
UK public bodies to be banned from making payments to ransomware gangs
"These new measures help undermine the criminal ecosystem that is causing harm across our economy."
Security
Sharepoint under attack: Microsoft rocked by "high-severity, high-urgency" Toolshell zero-day
"You should assume that you have been compromised at this point. Patching alone is insufficient to fully evict the threat."
Hacktivism
Europol leads global takedown of pro-Russian hacktivist group NoName057(16)
Cops smash Moscow-linked group blamed for a number of DDoS attacks and believed to wield a huge botnet.
Opinion
Cascading risk: Protecting against supply chain attacks in a hostile threat landscape
"The assumption that cyberattacks affect single organisations no longer holds. Today, one point of failure can escalate into a cross-sector crisis."
Security
"An AI obedience problem": World's first LLM Scope Violation attack tricks Microsoft Copilot into handing over data
Zero-click bug requires "no specific user interaction and results in concrete cybersecurity damage", researchers allege.
Security
Marco Rubio was AI cloned: How can you avoid the same fate and stay safe from voice spoofing?
Imposter used AI to imitate the voice of the United States Secretary of State, highlighting a growing risk all organisations need to be aware of.
Security
Four people arrested over M&S, Co-op and Harrods cyberattacks
National Crime Agency seizes three male suspects as well as a 20-year-old woman during operations in London and the West Midlands.
Security
Scattered Spider's latest victim? Qantas confirms encounter with mysterious "cyber criminal"
Airline contacted by shadowy threat actor following incident feared to have exposed millions of people's data.
Cybercrime
Search engine criminalisation: SEO poisoning campaign exposed
Scammers are buying up dodgy websites on underground marketplaces to manipulate search rankings and lure victims onto malicious pages.