Tag: cyber
-
New Phishing Kit Using BitB Technique Targets Microsoft Accounts to Steal Credentials via Sneaky 2FA Attack
The cybersecurity landscape continues to evolve as threat actors deploy increasingly sophisticated phishing techniques to bypass security controls and steal user credentials. Security researchers at Push Security have recently identified a concerning development in the Phishing-as-a-Service (PhaaS) ecosystem: the Sneaky2FA phishing kit has incorporated the Browser-in-the-Browser (BitB) technique to target Microsoft account credentials with unprecedented…
-
New .NET Malware Conceals Lokibot Inside PNG/BMP Files to Bypass Detection
Remote Access Trojans (RATs) and Trojan Stealers continue to dominate the threat landscape as some of the most prevalent malware families. To evade detection on compromised systems, these threats increasingly employ sophisticated crypters, loaders, and steganographic techniques that disguise malicious code within seemingly benign file formats such as images. Building on their August 2025 analysis…
-
Behind the firewall: The hidden struggles of cyber professionals with a disability
Daisy Wong Daisy WongWhen Daisy Wong, head of security awareness at Medibank, first entered cybersecurity, she didn’t expect to become an advocate for inclusion, she just wanted to prove that being in a wheelchair was no barrier to what she could achieve. “I never wanted to be in cybersecurity. I did marketing at uni,” she…
-
Microsoft unveils AI agents to automate security operations
Tech giant bakes AI agents into its security products to democratise advanced security capabilities, automate repetitive tasks, and provide context-aware intelligence for cyber defenders First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366634531/Microsoft-unveils-AI-agents-to-automate-security-operations
-
News alert: SpyCloud forecasts Top 10 identity threats set to define 2026 security landscape
AUSTIN, Texas, Nov. 18, 2025, CyberNewswire “, SpyCloud, the leader in identity threat protection, today released its report, The Identity Security Reckoning: 2025 Lessons, 2026 Predictions, outlining 10 of the top trends that will shape the cyber threat… (more”¦) First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/11/news-alert-spycloud-forecasts-top-10-identity-threats-set-to-define-2026-security-landscape/
-
Anthropic AI-powered cyberattack causes a stir
Tags: ai, attack, china, cyber, cyberattack, cybersecurity, espionage, finance, government, group, hacking, programming, technology, toolAI “‹”‹company Anthropic recently announced that companies worldwide have been attacked by an AI-powered cyber espionage campaign. It is purported to be the first publicly documented case of a cyberattack carried out by an AI model.According to the research report, around 30 organizations worldwide were affected by the attacks. These included large technology companies, financial institutions,…
-
US Cyber Defense Agency Admits to Major Staffing Crisis
Internal Memo Says Trump-Era Cuts ‘Hampered’ CISA During ‘Pivotal Moment’. The Cybersecurity and Infrastructure Security Agency is reeling from an apparent 40% vacancy rate in several key divisions following White House-driven cuts and a prolonged government shutdown, according to an internal memo revealing how recent layoffs were undermining federal readiness. First seen on govinfosecurity.com Jump…
-
Cloudflare Outage Shows Why Cyber Resilience Matters
The Cloudflare outage showed how one failure can disrupt the internet and highlighted the need for stronger cyber resilience. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/news-cloudflare-global-outage/
-
WhatsApp Screen-Sharing Scam: How Attackers Are Deceiving Users to Expose Sensitive Information
Scams and threats circulating on messaging apps like WhatsApp demonstrate how easily trusted platforms can be weaponized against users. One deceptive tactic gaining traction involves tricking people into sharing their phone screens during WhatsApp video calls. The screen-sharing feature, available since 2023, is increasingly being turned against users to steal data, identities, and money. Cases…
-
Google Play Store to Show Warning for Power-Hungry Apps
Google is taking decisive action against apps that drain excessive battery power, introducing a new warning system that will alert users before they download power-hungry applications. Starting March 1, 2026, apps that fail to meet Google’s battery-efficiency standards may see reduced visibility on the Play Store and display warnings on their listing pages. The tech…
-
SecurityMetrics Wins >>Data Leak Detection Solution of the Year<< in 2025 CyberSecurity Breakthrough Awards Program
Orem, United States, November 18th, 2025, CyberNewsWire SecurityMetrics, a leading innovator in compliance and cybersecurity, today announced that its Shopping Cart Inspect (SCI) solutions has been selected as winner of the “Data Leak Detection Solution of the Year” award in the 9th annual CyberSecurity Breakthrough Awards program. Conducted by CyberSecurity Breakthrough, an independent market intelligence…
-
SpyCloud Unveils Top 10 Cybersecurity Predictions Poised to Disrupt Identity Security in 2026
Austin, TX/USA, November 18th, 2025, CyberNewsWire Forecast report highlights surge in identity-based threats, evolving threat actor tactics, and increased risk from AI and insider threats. SpyCloud, the leader in identity threat protection, today released its report, The Identity Security Reckoning: 2025 Lessons, 2026 Predictions, outlining 10 of the top trends that will shape the cyber…
-
New EchoGram Trick Makes AI Models Accept Dangerous Inputs
Security researchers at HiddenLayer have uncovered a critical vulnerability that exposes fundamental weaknesses in the guardrails protecting today’s most powerful artificial intelligence models. The newly discovered EchoGram attack technique demonstrates how defensive systems safeguarding AI giants like GPT-4, Claude, and Gemini can be systematically manipulated to either approve malicious content or generate false security alerts.…
-
SecurityMetrics Wins >>Data Leak Detection Solution of the Year<< in 2025 CyberSecurity Breakthrough Awards Program
Orem, United States, November 18th, 2025, CyberNewsWire SecurityMetrics, a leading innovator in compliance and cybersecurity, today announced that its Shopping Cart Inspect (SCI) solutions has been selected as winner of the “Data Leak Detection Solution of the Year” award in the 9th annual CyberSecurity Breakthrough Awards program. Conducted by CyberSecurity Breakthrough, an independent market intelligence…
-
SpyCloud Unveils Top 10 Cybersecurity Predictions Poised to Disrupt Identity Security in 2026
Austin, TX/USA, November 18th, 2025, CyberNewsWire Forecast report highlights surge in identity-based threats, evolving threat actor tactics, and increased risk from AI and insider threats. SpyCloud, the leader in identity threat protection, today released its report, The Identity Security Reckoning: 2025 Lessons, 2026 Predictions, outlining 10 of the top trends that will shape the cyber…
-
New EchoGram Trick Makes AI Models Accept Dangerous Inputs
Security researchers at HiddenLayer have uncovered a critical vulnerability that exposes fundamental weaknesses in the guardrails protecting today’s most powerful artificial intelligence models. The newly discovered EchoGram attack technique demonstrates how defensive systems safeguarding AI giants like GPT-4, Claude, and Gemini can be systematically manipulated to either approve malicious content or generate false security alerts.…
-
WhatsApp Screen-Sharing Scam: How Attackers Are Deceiving Users to Expose Sensitive Information
Scams and threats circulating on messaging apps like WhatsApp demonstrate how easily trusted platforms can be weaponized against users. One deceptive tactic gaining traction involves tricking people into sharing their phone screens during WhatsApp video calls. The screen-sharing feature, available since 2023, is increasingly being turned against users to steal data, identities, and money. Cases…
-
Google Play Store to Show Warning for Power-Hungry Apps
Google is taking decisive action against apps that drain excessive battery power, introducing a new warning system that will alert users before they download power-hungry applications. Starting March 1, 2026, apps that fail to meet Google’s battery-efficiency standards may see reduced visibility on the Play Store and display warnings on their listing pages. The tech…
-
Authorities Dismantle Thousands of Servers from Illicit Hosting Company Linked to Cyberattacks
In a landmark operation targeting cybercriminal infrastructure, the East Netherlands cybercrime team conducted a major takedown of a rogue hosting company suspected of facilitating a broad spectrum of malicious activities. During the coordinated enforcement action on November 12th, law enforcement seized approximately 250 physical servers located in data centers across The Hague and Zoetermeer. The…
-
ISMG Fraud Prevention, Financial Cyber Summits: The AI Bet
Tags: ai, ciso, compliance, cyber, cybersecurity, defense, finance, fraud, identity, regulation, resilience, risk, strategy, threatCyber Leaders Address AI Threats, Compliance Resilience, Zero Trust. From AI”‘driven fraud schemes to tightening regulations and identity threats, ISMG’s New York Fraud Prevention and Financial Cybersecurity Summits brought together CISOs, investigators and risk leaders to share practical strategies for strengthening defenses and building true resilience. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ismg-fraud-prevention-financial-cyber-summits-ai-bet-a-30055
-
ISMG Fraud Prevention, Financial Cyber Summits: The AI Bet
Tags: ai, ciso, compliance, cyber, cybersecurity, defense, finance, fraud, identity, regulation, resilience, risk, strategy, threatCyber Leaders Address AI Threats, Compliance Resilience, Zero Trust. From AI”‘driven fraud schemes to tightening regulations and identity threats, ISMG’s New York Fraud Prevention and Financial Cybersecurity Summits brought together CISOs, investigators and risk leaders to share practical strategies for strengthening defenses and building true resilience. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ismg-fraud-prevention-financial-cyber-summits-ai-bet-a-30055
-
FCC looks to torch Biden-era cyber rules sparked by Salt Typhoon mess
Regulator sides with telcos that claimed new cybersecurity duties were too ‘burdensome’ First seen on theregister.com Jump to article: www.theregister.com/2025/11/18/fcc_salt_typhoon_rules/
-
Take fight to the enemy, US cyber boss says
Tags: cyberWhen? Sean Cairncross wouldn’t say First seen on theregister.com Jump to article: www.theregister.com/2025/11/18/the_us_wants_to_go/
-
Completed draft of cyber strategy emphasizes imposing costs, industry partnership
The national cyber director and a top FBI official shared more details about the forthcoming Trump administration document Tuesday. First seen on cyberscoop.com Jump to article: cyberscoop.com/trump-cyber-strategy-six-pillars-industry-partnerships-deterrence/
-
Trump’s cyber strategy will emphasize adversary deterrence, industry partnerships
Cyberattacks on the U.S. are “becoming more aggressive every passing day,” the national cyber director says. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/trump-administration-national-cyber-strategy-preview-sean-cairncross-aspen/805782/
-
National cyber strategy will include focus on ‘shaping adversary behavior,’ White House official says
The upcoming strategy would contain six “pillars”, with one focused on “shaping adversary behavior” and another on public-private partnerships, Sean Cairncross said. First seen on therecord.media Jump to article: therecord.media/national-cyber-strategy-cairncross-shaping-enemy-behavior
-
CISA 2015 Receives Extension, Offering Brief Relief for Cyber Information Sharing
One US cybersecurity leader described the short-term extension of the Cybersecurity Information Sharing Act as a “temporary patch” and called for a long-term solution First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cisa-2015-receives-extension/