Automated AI agent used to breach cybersecurity nonprofit DIVD
The Dutch Institute for Vulnerability Disclosure (DIVD) suffered an AI-driven cyberattack that the organization described as "loud and very, very messy." [...]
BleepingComputer
Strategic
'NeedyMantis' Provides Long-Term Access to Compromised Networks
Microsoft observed a China-based actor using a previously unidentified malware framework in targeted intrusions against telcos, universities, medical, and government-related organizations.
Dark Reading
Hackers Hide Malware Inside 7-Zip Installers Using a New Evasion Technique
Malware operators are hiding code inside the part of a 7-Zip installer that unpacks files. A seemingly ordinary installation can start while a concealed loader contacts an attacker-controlled server. Users and analysts …
CyberSecurityNews
RemoteThreat Launches With $7 Million for Offensive Operations Platform
The company emerged from stealth mode with pre-seed funding from Osage University Partners and DataTribe. The post RemoteThreat Launches With $7 Million for Offensive Operations Platform appeared first on SecurityWeek.
SecurityWeek
Hackers Built a Botnet That Doesn’t Just Steal Data, It Burns AI Credits
A Windows botnet called x47.c can spend victims’ paid AI credits, steal data, and flood websites. Its operator markets it as an attack toolkit for remote use, but the evidence describes advertised capabilities, not conf…
CyberSecurityNews
Apple patches CoreGraphics zero-day already exploited in targeted attacks
Meta-spotted flaw could hand attackers arbitrary code execution via a maliciously crafted file
The Register
Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers
The critical vulnerabilities, which impact default configurations of NetScaler products, essentially give attackers a skeleton key to customers' networks.
Dark Reading
Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown
Kiteworks on Monday said it worked with federal intelligence authorities over the weekend as it identified and addressed a critical security vulnerability during the scheduled precautionary shutdown. "During the shutdow…
The Hacker News
Shaquille O’Neal lives out his superhero fantasies as he joins NordVPN to help battle cybercriminals
But what does he know about cybercrime?
Cybernews
Hackers Turned Ethereum Into a Secret Messaging System for Malware
A North Korea-linked malware campaign has found a way to keep infected computers connected to its operators. Instead of storing malware on Ethereum, the attackers hide the location of a control server inside cryptocurre…
CyberSecurityNews
Popular games on Google Play contain trackers from Russia, China, and Israel, study finds
The mobile gaming industry is built on an insidious surveillance network, Proton says.
Cybernews
Catch threats before they escalate with real-time Identity Telemetry
Identity governance helps control who should have access, but periodic reviews alone may not reveal attacks as they happen. tenfold Software explains how real-time identity telemetry can help security teams investigate …
BleepingComputer
101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent
Cybersecurity researchers have identified a cluster of 101 npm packages that are used to trap developers into a WhatsApp group subscriber campaign dubbed PhantomSub. "The malicious packages abuse the 'Baileys' WhatsApp …
The Hacker News
OpenAI benches GPT-6.1 Astra for overstepping the mark
Turns out teaching an AI to keep going can make it rather bad at knowing when to stop
The Register
SilverFox Hackers Built Fake Software Sites That Hide Malware From Security Researchers
Fake software download pages are drawing Windows users into a Silver Fox-linked malware campaign. The pages imitate familiar vendors and supply installers that can leave an infected computer vulnerable to continued acce…
CyberSecurityNews
Scans for Wordfence Protected Websites, (Tue, Sep 29th)
Starting yesterday, our sensors picked up a small number of scans for "wordfence-waf.php". This particular script is used by Wordfence, a solution to protect WordPress sites. During the Wordfence install, the wordpress-…
SANS ISC
The Minions router is going viral, but its WiFi 6E hardware is no joke
A minion miles from boring.
Cybernews
Reco Raises $55 Million for Agentic Security
The company will use the funds to expand its sales, partnerships, channels, and customer support teams. The post Reco Raises $55 Million for Agentic Security appeared first on SecurityWeek.
SecurityWeek
OpenAI Scrapped the New GPT-6.1 Astra Model Following Security Concerns
OpenAI has scrapped the release of GPT-6.1 Astra after internal safety testing exposed troubling failures involving deception, authorization boundaries, and unsafe tool use. The agentic AI model had been scheduled for a…
CyberSecurityNews
European trade unions want Palantir ditched. EU defense chief calls it “a great company”
Groups worry that Palantir poses risks to civil rights and democracy.
Cybernews
Hackers Use ChatGPT Custom GPTs in ClickFix Attacks
The personalized versions of ChatGPT were used to impersonate legitimate products and trick users into executing PowerShell commands. The post Hackers Use ChatGPT Custom GPTs in ClickFix Attacks appeared first on Securi…
SecurityWeek
GPT-6 Astra AI Agent Tried to Deceive Developers and Hack Software Supply Chains
The UK AI Security Institute (AISI) recently disclosed that during cybersecurity evaluations, the GPT-6 Astra model executed simulated, unauthorized supply-chain attacks. This was part of a pre-release assessment conduc…
CyberSecurityNews
GitHub AI Security Agent Finds 24 Android Vulnerabilities Including Account Takeover Flaws
GitHub Security Lab has disclosed that its open-source AI security agent identified 24 vulnerabilities in Android applications, including flaws that could enable covert location tracking in OsmAnd and account takeover a…
CyberSecurityNews
Researchers got AI "drunk" and its safety guardrails started to fail
Drunk personas made AI guardrails far easier to break.
Cybernews
Pentagon Personnel Agency Data Breach Impacts 3 Million People
The data breach affects the Defense Manpower Data Center (DMDC), which maintains personnel records for the Department of Defense. The post Pentagon Personnel Agency Data Breach Impacts 3 Million People appeared first on…
SecurityWeek
Opposing surveillance just got more complicated: Flock protesters arrested
You can’t speak out against Flock cameras anymore.
Cybernews
GoFundMe cancels 81-year-old’s $745K cancer fundraiser after identity raises suspicions
Was it just a misunderstanding?
Cybernews
Dear Copilot users, your depraved prompts for sexual AI content are read by humans
If you think your prompts remain private, you’re wrong.
Cybernews
What can a person find about you in an hour?
We leave a surprising number of breadcrumbs that can be pieced together remarkably quickly.
Cybernews
Self-funded documentary Ghost in the Machine takes aim at AI’s roots in eugenics
“We don't have to participate in this notion of an inevitable future that's going to sweep us away.”
Cybernews
Hackers Weaponizing ChatGPT’s Custom GPT Feature to Trick Victims into Installing Malware
Hackers are abusing ChatGPT’s Custom GPT feature to impersonate AI products and trick users into installing a sophisticated remote access trojan (RAT), according to Huntress researchers. The campaign turns a trusted Cha…
CyberSecurityNews
Rig Security Emerges From Stealth With $12M to Tackle Agentic AI Identity Risks
Rig provides an identity dependencies graph to distinguish between legitimate users and rogue AI agents The post Rig Security Emerges From Stealth With $12M to Tackle Agentic AI Identity Risks appeared first on Security…
SecurityWeek
Critical Authlib authentication bypass flaw leaves countless apps in danger
Authlib maintainers could not be reached to coordinate the vulnerability.
Cybernews
Vietnamese man charged in $16 million 'pig butchering' crypto scam
A Vietnamese national was charged with money laundering for his role in a massive "pig butchering" scam, which defrauded a victim out of $16 million worth of cryptocurrency. [...]
BleepingComputer
Former X-Force hackers chase the offensive cyber gold rush
RemoteThreat launches with $7M, 1,000 attack tools, and ambitions to equip enterprises and Uncle Sam for AI-speed operations
The Register
Four Cyber Threats Harboring Big Plans for the Future
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations. The post Four Cyber Threats Harboring Big Plans…
SecurityWeek
North Korea’s unexpected weapon: women watching Friends
North Koreans weaponize “made in America” staples – Friends and ChatGPT – to attack Americans.
Cybernews
OpenAI Calls Off GPT-6.1 Astra Launch, Details Safety Cases for Frontier Training
The GPT-6.1 Astra model was slated to debut in ChatGPT and Codex in October, but it fell short of expectations. The post OpenAI Calls Off GPT-6.1 Astra Launch, Details Safety Cases for Frontier Training appeared first o…
SecurityWeek
Using Device Linking to Eavesdrop on WhatsApp and Signal
Modern messaging apps allow users to link their phone accounts to their computer desktop. Eavesdroppers are taking advantage of this capability: Apps such as WhatsApp Web and Signal Desktop allow people to use their acc…
Bruce Schneier
Dutch Police Arrest Convicted Hacker in ShinyHunters Investigation
Pepijn van der Stap was convicted in 2023 for hacking multiple organizations, stealing their data, and extorting them. The post Dutch Police Arrest Convicted Hacker in ShinyHunters Investigation appeared first on Securi…
SecurityWeek
AgtaBackup RAT Uses Fake Microsoft Store Pages and RMM Tools to Hijack Windows Systems
A newly tracked Windows remote access trojan called AgtaBackup RAT is using fake Microsoft Store pages to gain a foothold on victims’ computers. The campaign pretends to offer popular video-conferencing software, but th…
CyberSecurityNews
3.800 Onlineshops über Magento- und Adobe-Commerce-Schwachstellen gehackt
Lockster-Gruppe hackt Tausende Shops, vergisst aber, den eigenen Server zu sichern.
Cybernews
Modulate Raises $25M to Fight Deepfake Voices With Next-Generation Audio AI
Modulate has secured $25 million in funding to expand its audio-native AI platform as enterprises confront deepfake voice fraud, impersonation, and unsafe automated conversations. Future Ventures led the round, joined b…
CyberSecurityNews
OpenAI’s AI Agents Went Beyond Their Tasks and Triggered New Security Concerns
OpenAI has acknowledged that one of its experimental AI agents gained unauthorized access to an Australian government health statistics portal during internal training in June. The incident has intensified concerns that…
CyberSecurityNews
Daemon Tools Hackers’ NeedyMantis Malware Dissected by Microsoft
The malware framework uses a modular architecture and a custom executable file format for long-term persistence. The post Daemon Tools Hackers’ NeedyMantis Malware Dissected by Microsoft appeared first on SecurityWeek.
SecurityWeek
Walmart vows AI won’t charge shoppers more based on personal data
Let’s not get personal.
Cybernews
A fake journalist used a real Calendly link to phish a tech founder
One genuine link, one fake app, one hijacked account.
Cybernews
wolfSSL 5.9.4 Fixes 11 TLS Security Flaws and Expands Post-Quantum Cryptography Support
wolfSSL has released version 5.9.4, fixing 11 security vulnerabilities in its embedded TLS and cryptography library while adding major post-quantum cryptography capabilities. The update is important for developers using…
CyberSecurityNews
Sony patent reveals how your PlayStation controller may soon pay for your games
Tap and play.
Cybernews
Kiteworks patches critical flaw, brings customer systems online
American tech company Kiteworks has lifted a precautionary advisory asking customers to shut down systems after patching a critical vulnerability. [...]
BleepingComputer
Storm-3168 Deletes Azure Resources in 7-Minute Destructive Cloud Attack
Storm-3168 used compromised cloud identities to carry out a destructive attack against an Azure environment in minutes. The operation shows how a stolen application credential can give an intruder broad control over hos…
CyberSecurityNews
Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation
Dutch authorities have confirmed that they arrested a 24-year-old man from Amsterdam in connection with the ShinyHunters group. "It is true that this month a 24-year-old man from Amsterdam was arrested in an investigati…
The Hacker News
Apple patches zero-day exploit possibly used in “extremely sophisticated” attacks
The bug in CoreGraphics is probably being exploited in spyware like Pegasus.
Cybernews
Deepfakes at schools overwhelmingly target girls and women – and most involve explicit content
71% of recorded deepfakes at educational institutions involved sexual content
Cybernews
Pentagon confirms data breach: over 3 million people affected
The unauthorized intrusion lasted for months.
Cybernews
Anthropic researcher who predicted AI doomsday may have been an industry plant
A public relations stunt?
Cybernews
Critical WatchGuard API Vulnerabilities Enables Command Execution Attacks
WatchGuard has disclosed three security vulnerabilities affecting WatchGuard AP devices, including two critical flaws that could allow attackers to gain unauthenticated access and execute commands on vulnerable access p…
CyberSecurityNews
BotHelper RAT Uses Encrypted Payloads and Live Screen Surveillance to Spy on Windows Users
A newly documented Windows remote access trojan, dubbed BotHelper RAT, gives attackers a quiet way to watch an infected user’s screen and control the device. The malware arrives through a small starter program, hides it…
CyberSecurityNews
Apple patches CoreGraphics zero-day flaw exploited in attacks
Apple released security updates to fix a zero-day vulnerability exploited in "extremely sophisticated" targeted attacks on iOS devices. [...]
BleepingComputer
Why OT Resilience Is Now a Boardroom Imperative
For decades, industrial cybersecurity rested on a comfortable assumption: operational technology (OT) was protected by physical isolation. The "air gap" guaranteed that power grids, manufacturing lines, and water system…
Palo Alto Security