Tag: attack
-
US warns of AI-powered attacks on Siemens PLCs in critical infrastructure
U.S. cybersecurity agencies warn that threat actors are using AI-generated scripts to exploit Siemens S7 Series programmable logic controllers (PLCs) in U.S. critical infrastructure. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/us-warns-of-ai-powered-attacks-on-siemens-plcs-in-critical-infrastructure/
-
Supply chain attack modelling using MITRE ATTCK
Supply chain risk is often discussed as a supplier problem, but for security teams it is better treated as an attack path problem. The practical question is not simply whether a supplier is trustworthy. It is how a compromise of that supplier, their software, their credentials, or their support channels could be used to reach……
-
Abnormal Is Not Malicious. Malicious Is No Longer Abnormal
AI-powered email security is moving beyond anomaly detection to reason about intent, context and deception as advanced phishing attacks increasingly hide inside trusted brands and ordinary business communication. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/abnormal-is-not-malicious-malicious-is-no-longer-abnormal/
-
Password spraying attacks surge 155x as hackers exploit MFA gaps
Huntress observed a 155x increase in password spraying attacks in H1 2026, including a campaign that generated more than 81 million login attempts in two weeks. The attacks exploited legacy authentication and gaps in MFA policies that left some login flows unprotected. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/password-spraying-attacks-surge-155x-as-hackers-exploit-mfa-gaps/
-
Password spraying attacks surge 155x as hackers exploit MFA gaps
Huntress observed a 155x increase in password spraying attacks in H1 2026, including a campaign that generated more than 81 million login attempts in two weeks. The attacks exploited legacy authentication and gaps in MFA policies that left some login flows unprotected. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/password-spraying-attacks-surge-155x-as-hackers-exploit-mfa-gaps/
-
Blinde Flecken bei der Absicherung von KI-Rechenzentren
TrendAI veröffentlicht den Report ‘An Invisible Attack Surface: Thousands of Industrial Control Systems Exposed Near Data Centers”. Die Untersuchung zeigt: Während die Server von KI-Rechenzentren mit leistungsstarken Firewalls und Zero-Trust-Architekturen gesichert werden, bleibt eine andere Angriffsfläche oft unbeachtet die physische Gebäudetechnik, die Kühlung, Stromversorgung und Klimaregelung steuert. Forscher von TrendAI fanden 6.300 solcher Systeme, […]…
-
Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P
Cybersecurity researchers at Hunt.io have disclosed details of a campaign that they say compromised more than 14,530 Dahua devices between June 17 and July 22, 2026, using credential attacks, two authentication-bypass flaws, and a peer-to-peer (P2P) relay technique.The activity, codenamed Operation CameraSwarm, was reconstructed from a 407 MB exposed working directory containing 2,616 files First…
-
Describing attacks with crime script analysis
Martin explores how using crime script analysis to describe an attack with everyday language makes the situation accessible to non-technical audiences and identify points where the crime can be disrupted. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/describing-attacks-with-crime-script-analysis/
-
RAVEN Tool Steals Entire Elasticsearch Databases and Rebuilds Deleted Backdoors
The RAVEN offensive framework can turn compromised Elasticsearch and Kibana environments into durable data-theft and persistence operations. RAVEN, short for Reconnaissance & Attack on Vulnerable Elasticsearch Nodes, is an open-source modular framework built to assess Elasticsearch and Kibana security posture across reconnaissance, exploitation, exfiltration, persistence, and cleanup workflows. Its latest walkthrough focuses on post-exploitation against…
-
Taylor Swift, Nine Other Celebrity Women Top the List of Deepfakes
AI-powered deepfakes are making phishing and impersonation attacks harder to detect, forcing security teams to rethink identity verification, authentication and fraud prevention. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/taylor-swift-nine-other-celebrity-women-top-the-list-of-deepfakes/
-
Medusa Ransomware Attacks 300+ Critical Infrastructure Organizations Using Double Extortion
Tags: advisory, attack, cisa, cyber, extortion, infrastructure, intelligence, ransomware, service, updateMedusa ransomware operators have compromised over 500 organizations across critical infrastructure sectors, according to a joint advisory issued by the FBI, CISA, and the U.S. Department of Health and Human Services (HHS) as part of their #StopRansomware initiative. An update released on August 18, 2026, provides expanded intelligence based on FBI investigations conducted as recently…
-
China-Linked Hacker Shows AI Capabilities in APAC Attack
In the first purported near-autonomous attack on a nation-state, a Chinese-language operator used a complex AI framework to target and compromise government agencies, likely in Taiwan. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/china-linked-hacker-ai-capabilities-apac-attack
-
Your Security Appliances Are the Attack Surface
Tags: attack<div cla Your Security Appliances Are the Attack Surface First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/your-security-appliances-are-the-attack-surface/
-
‘Living Off the Plant’ OT Attacks Pose Physical Safety Risk
Beware Abuse of Native OT Functionality, Says Orange Cyberdefense’s Ric Derbyshire. Attackers can employ living off the plant tactics to stealthily access and move laterally inside industrial networks, abusing native functionality to conduct cyberespionage or disruption campaigns. Orange Cyberdefense’s Ric Derbyshire details essential defenses against this threat. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/living-off-plant-ot-attacks-pose-physical-safety-risk-a-32591
-
Microsoft’s August Patch Tuesday: 400+ Bugs Fixed, One Zero-Day Under Attack
Microsoft’s August Patch Tuesday fixes about 400 security flaws, including an actively exploited Windows zero-day and multiple 9.8-rated RCE bugs. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/news-microsoft-august-2026-patch-tuesday/
-
‘CoSnitch’ Attack Tricked Copilot into Mapping Out Architecture
Researchers discovered a meta-hacking technique that can manipulate the AI service into revealing its own security weaknesses. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/cosnitch-attack-copilot-mapping-out-architecture
-
DDoS Attack Knocks Threema Messaging Service Offline for Hours
A large-scale DDoS attack disrupted Threema for hours, knocking hosted messaging offline as OnPrem deployments stayed online and attackers remained unknown. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/news-threema-ddos-attack/
-
Clop created custom web shell for Windchill data theft attacks
A custom Java web shell likely linked to the Clop ransomware gang was designed specifically for PTC Windchill and FlexPLM servers, with built-in features to decrypt credentials, enumerate file repositories, and steal files. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/clop-created-custom-web-shell-for-windchill-data-theft-attacks/
-
Bluesky says its recent outage was caused by another DDoS attack
This is the latest large-scale DDoS attack to hit the social networking site this year. First seen on techcrunch.com Jump to article: techcrunch.com/2026/08/18/bluesky-says-its-recent-outage-was-caused-by-another-ddos-attack/
-
Hackers target Ukrainian agency managing assets seized from sanctioned Russians
The agency said the latest attack came amid preparations to select a manager for seized corporate rights in IDS Ukraine, one of the country’s largest producers of bottled mineral water and beverages. First seen on therecord.media Jump to article: therecord.media/hackers-target-ukraine-agency-sanctioned-russians
-
Detecting AS-REP roasting in Active Directory authentication logs
AS-REP roasting is one of those identity attacks that can sit quietly in the background until an attacker has already gained useful foothold. For defenders, the challenge is not understanding the offensive technique in detail, but knowing what telemetry exists, what patterns matter, and how to turn that into a reliable detection. In a UK……
-
Your Controls Block Known Attacks. What About the Behavior?
Security controls can block a familiar attack method while missing quieter ways to achieve the same objective. Picus Security’s Blue Report 2026 shows how prevention rates can vary dramatically by technique and why behavioral testing is needed to uncover those gaps. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/your-controls-block-known-attacks-what-about-the-behavior/
-
Law Firms Increasingly Targeted By Ransomware/Vishing Attacks
Law firms face growing ransomware and data-theft threats as attackers target privileged client information, exposing firms to cybersecurity, ethical and legal risks. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/law-firms-increasingly-targeted-by-ransomware-vishing-attacks/
-
Cybercriminals Turn to Indirect Prompt Injection Attacks
Cybercriminals are developing indirect prompt injection tools to target AI agents. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/cybercriminals-turn-to-indirect-prompt-injection-attacks/
-
OpenAI Warns Organizations to Automate Cybersecurity as AI-Powered Attacks Accelerate
OpenAI has issued a warning that organizations need to quickly automate core cybersecurity functions as increasingly advanced AI systems make it easier and cheaper to identify, exploit, and chain security vulnerabilities. In a recent security article titled “The Defender’s Window,” OpenAI President Greg Brockman explained that the OpenAI-Hugging Face incident showcased how highly capable attackers…
-
Adam Shostack Talks Hugging Face Breach & PHANTOM-B
The security expert talks with the Dark Reading News Desk about why he blown away by OpenAI’s revelations regarding the Hugging Face attack, and also discussed his new threat model for LLMs. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/adam-shostack-talks-hugging-face-phantom-b
-
Download: 2026 Credential Risk Report
85% of cybersecurity professionals consider compromised credentials a primary attack path, yet only 19% continuously monitor active credentials and automatically remediate … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/18/download-enzoic-2026-credential-risk-report/
-
How the Mass-Adoption of AI is Redefining the Shift to Continuous Threat Exposure Management
AI adoption is expanding the enterprise attack surface faster than security teams can respond. Exposure management helps organizations discover shadow AI, protect sensitive data and prioritize exploitable risk. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/how-the-mass-adoption-of-ai-is-redefining-the-shift-to-continuous-threat-exposure-management/
-
Three-quarters of Ransomware Attacks Target Mid-Market Firms
Black Kite finds mid-market is the sweet spot for ransomware as manufacturers are most likely to be hit First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/threequarters-ransomware-attacks/