Security
Dark web Initial Access Brokers are selling hacked network access for as little as $500, study reveals
Investigators find that crooks offer consumer-style hack'n'mix bundles that package access with privilege or other treats.
Security
Security
Cursor fixes RCE vulnerability as developers' trust in AI coding tools plummets
"AI-powered tools are introducing attack surfaces we’ve never seen before. We’re entering a new era of security threats."
AI
Non-humans in the loop: AI agents and a shift to autonomous threat response
"By 2028, agentic AI will be embedded in a third of all enterprise software, with a growing share of operational decisions made autonomously."
Security
Cost of a data breach hits historic all-time high in the US, drops globally: IBM warns of growing shadow AI risk
"AI is accelerating across the enterprise, but the security and governance needed to protect it aren’t keeping pace."
Security
The rise of Dark LLMs: DDoS-for-hire cybercriminals are using AI assistants to mastermind attacks
Lawbreaking language models lower the barrier of entry for unskilled crooks and make it frighteningly easy to launch crime campaigns.
Security
Microsoft blames China for SharePoint ToolShell attacks, governments and nuclear weapons agency targeted
Fear turned to panic as scary 9.8 CVSS vulnerability came under active exploitation by bad guys including nation-state attackers.
Crime
UK public bodies to be banned from making payments to ransomware gangs
"These new measures help undermine the criminal ecosystem that is causing harm across our economy."
Security
Sharepoint under attack: Microsoft rocked by "high-severity, high-urgency" Toolshell zero-day
"You should assume that you have been compromised at this point. Patching alone is insufficient to fully evict the threat."
Crime
Europol leads global takedown of pro-Russian hacktivist group NoName057(16)
Cops smash Moscow-linked group blamed for a number of DDoS attacks and believed to wield a huge botnet.
Security
Cascading risk: Protecting against supply chain attacks in a hostile threat landscape
"The assumption that cyberattacks affect single organisations no longer holds. Today, one point of failure can escalate into a cross-sector crisis."
Security
"An AI obedience problem": World's first LLM Scope Violation attack tricks Microsoft Copilot into handing over data
Zero-click bug requires "no specific user interaction and results in concrete cybersecurity damage", researchers allege.
Security
Marco Rubio was AI cloned: How can you avoid the same fate and stay safe from voice spoofing?
Imposter used AI to imitate the voice of the United States Secretary of State, highlighting a growing risk all organisations need to be aware of.