Tag: threat
-
How powerful are current AI solutions in detecting NHIDR
What Are Non-Human Identities (NHIs), and Why Are They Crucial in Today’s Cloud Environment? Where data breaches and cyber threats are escalating, how do organizations secure the growing infrastructure of machine identities, known as Non-Human Identities (NHIs)? Where organizations shift to cloud-based operations, addressing security gaps related to NHIs becomes paramount. Non-Human Identities, or NHIs,……
-
How does AI decision making help companies stay ahead of threats
How Do Non-Human Identities Shape Our Approach to Cybersecurity? Are you aware of how machine identities are silently reshaping cybersecurity? With the rise of Non-Human Identities (NHIs), the traditional approach to cybersecurity needs a significant shift. These NHIs, such as machine identities, are pivotal in forming a robust defense line against potential threats. Understanding their……
-
New ErrTraffic service enables ClickFix attacks via fake browser glitches
A new cybercrime tool called ErrTraffic allows threat actors to automate ClickFix attacks by generating ‘fake glitches’ on compromised websites to lure users into downloading payloads or following malicious instructions First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/new-errtraffic-service-enables-clickfix-attacks-via-fake-browser-glitches/
-
Widely Used Malicious Extensions Steal ChatGPT, DeepSeek Conversations
Threat actors used two malicious Chrome extensions that have 900,000 users to steal their chats with AI models like ChatGPT and DeepSeek and browser history. The incident is the latest in a growing string of attacks in which hackers weaponized browser extensions to exfiltrate huge amounts of sensitive data. First seen on securityboulevard.com Jump to…
-
Widely Used Malicious Extensions Steal ChatGPT, DeepSeek Conversations
Threat actors used two malicious Chrome extensions that have 900,000 users to steal their chats with AI models like ChatGPT and DeepSeek and browser history. The incident is the latest in a growing string of attacks in which hackers weaponized browser extensions to exfiltrate huge amounts of sensitive data. First seen on securityboulevard.com Jump to…
-
Red Team Brainstorming With GPTs Accelerates Threat Modeling
Large language models have a well-earned reputation for making things up. But for AI cybersecurity architect Erica Burgess, rather than being a bug, GPT hallucinations can be a threat-modeling feature. I like to think of the hallucinations as just ideas that haven’t been tested yet, she said. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/interviews/red-team-brainstorming-gpts-accelerates-threat-modeling-i-5517
-
Hackers Promote “VOID” AV Killer Claiming Kernel-Level Defense Evasion
A threat actor operating under the handle Crypt4You has begun advertising a sophisticated new offensive tool on underground cybercrime forums, marketed as a >>kernel-level>crypters
-
ESET Flags Rising Threat of AI-Driven Malware and Ransomware
The cybersecurity landscape entered a critical new era in the second half of 2025 as AI-powered malware transitioned from theoretical threat to tangible reality, while the ransomware-as-a-service economy expanded at an unprecedented pace. According to ESET Research’s latest Threat Report, these twin forces are reshaping how organizations must approach cyber defense. ESET discovered PromptLock, the…
-
New Spear-Phishing Attack Targeting Security Individuals in the Israel Region
Israel’s National Cyber Directorate has issued an urgent alert warning of an active spear-phishing campaign specifically targeting individuals employed in security and defense-related sectors. The operation, linked to infrastructure associated with APT42 (also known as Charming Kitten), represents a deliberate and sophisticated threat targeting high-value personnel rather than opportunistic mass phishing. The attack leverages WhatsApp…
-
CISA Alerts on Active Exploitation of MongoDB Vulnerability CVE-2025-14847
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning about the active exploitation of CVE-2025-14847, a severe vulnerability affecting MongoDB and MongoDB Server. The flaw was added to CISA’s Known Exploited Vulnerabilities (KEV) catalog on December 29, 2025, signaling that threat actors are actively targeting this security weakness in real-world attacks.…
-
Symantec, Carbon Black Unite Under Broadcom
Jason Rolleston: Unified Agent and AI Aim to Boost Midmarket Security Capabilities. Broadcom’s integration of Symantec and Carbon Black promises a unified single-agent framework and AI-enhanced threat detection to help small and midmarket businesses defend against sophisticated cyberthreats with limited resources, said Jason Rolleston. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/symantec-carbon-black-unite-under-broadcom-a-30412
-
Fortinet warns of 5-year-old FortiOS 2FA bypass still exploited in attacks
Fortinet has warned customers that threat actors are still actively exploiting a critical FortiOS vulnerability that allows them to bypass two-factor authentication (2FA) when targeting vulnerable FortiGate firewalls. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fortinet-warns-of-5-year-old-fortios-2fa-bypass-still-exploited-in-attacks/
-
Real-time threat detection for post-quantum AI inference environments.
Explore real-time threat detection in post-quantum AI inference environments. Learn how to protect against evolving threats and secure model context protocol (mcp) deployments with future-proof security solutions. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/12/real-time-threat-detection-for-post-quantum-ai-inference-environments/
-
You’ve been targeted by government spyware. Now what?
Tech companies are increasingly warning their customers that they have been targeted by governments with advanced government spyware, such as NSO’s Pegasus or Paragon’s Graphite. What happens after receiving a threat notification? First seen on techcrunch.com Jump to article: techcrunch.com/2025/12/29/youve-been-targeted-by-government-spyware-now-what/
-
You’ve been targeted by government spyware. Now what?
Tech companies are increasingly warning their customers that they have been targeted by governments with advanced government spyware, such as NSO’s Pegasus or Paragon’s Graphite. What happens after receiving a threat notification? First seen on techcrunch.com Jump to article: techcrunch.com/2025/12/29/youve-been-targeted-by-government-spyware-now-what/
-
Top 5 real-world AI security threats revealed in 2025
Tags: access, ai, api, attack, breach, chatgpt, cloud, control, credentials, cybercrime, data, data-breach, defense, email, exploit, flaw, framework, github, gitlab, google, injection, least-privilege, LLM, malicious, malware, microsoft, nvidia, open-source, openai, rce, remote-code-execution, risk, service, software, supply-chain, theft, threat, tool, vulnerabilityA critical remote code execution (RCE) in open-source AI agent framework Langflow that was also exploited in the wildAn RCE flaw in OpenAI’s Codex CLIVulnerabilities in NVIDIA Triton Inference ServerRCE vulnerabilities in major AI inference server frameworks, including those from Meta, Nvidia, Microsoft, and open-source projects such as vLLM and SGLangVulnerabilities in open-source compute framework…
-
Middle East tech trends 2026: AI, cyber security and sovereign infrastructure take centre stage
As artificial intelligence moves from experimentation to production and cyber threats escalate, the Middle East is entering a decisive phase of digital transformation, says Omdia chief analyst Trevor Clarke First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366636636/Middle-East-tech-trends-2026-AI-cyber-security-and-sovereign-infrastructure-take-centre-stage
-
Hacktivist Proxies and the Normalization of Cyber Pressure Campaigns
A significant shift in the cyber threat landscape has been identified in a new research report, distinguishing modern >>Hacktivist Proxy Operations
-
TDL 012 – The Architect of the Internet on the Future of Trust
Summary In this episode of The Defenders Log, Paul Mockapetris, the architect of DNS, discusses the evolving role of the Domain Name System from a simple directory to a sophisticated security tool. He posits that modern networking requires “making sure DNS doesn’t work when you don’t want it to,” comparing DNS filtering to essential services…
-
Unpatched FortiGate Security Flaw Allows Attackers to Bypass 2FA Controls
A critical authentication bypass vulnerability in FortiGate devices enables threat actors to circumvent two-factor authentication (2FA) protections through case-sensitive username manipulation. The flaw, tracked as CVE-2020-12812, affects organizations with specific LDAP integration configurations and remains exploitable on unpatched systems. The vulnerability stems from FortiGate’s default case-sensitive username handling conflicting with LDAP directories that treat usernames…
-
AI-Driven Attacks and the Future of Security
AI is changing cybercrime in a big way. Autonomous AI agents could soon carry out entire attacks on their own -scanning servers, testing vulnerabilities, refining exploits and even launching phishing campaigns from start to finish, said David Sancho, senior threat researcher at Trend Micro. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/interviews/ai-driven-attacks-future-security-i-5516
-
Quantum-resistant key management for AI model deployments.
Discover how quantum-resistant key management secures AI model deployments, protecting against quantum computing threats with advanced encryption and zero-trust strategies. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/12/quantum-resistant-key-management-for-ai-model-deployments/
-
Quantum-resistant key management for AI model deployments.
Discover how quantum-resistant key management secures AI model deployments, protecting against quantum computing threats with advanced encryption and zero-trust strategies. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/12/quantum-resistant-key-management-for-ai-model-deployments/
-
US Energy Dept Flags AI, Cyber Gaps as Top Risks for 2026
New Report Says DOE Cyber and AI Governance Is Lagging Behind Rapid Deployment. An inspector general report warns the Department of Energy’s rapid expansion of artificial intelligence and decentralized cybersecurity controls has outpaced governance, limiting enterprise visibility and exposing critical infrastructure to persistent threats from state-backed and criminal actors. First seen on govinfosecurity.com Jump to…
-
Evasive Panda APT: Malware Delivery via AitM and DNS Poisoning
Evasive Panda, a sophisticated threat actor known by the aliases Bronze Highland, Daggerfly, and StormBamboo, has escalated its offensive capabilities through a two-year campaign that has deployed advanced attack techniques,, including adversary-in-the-middle (AitM) attacks and DNS poisoning. According to June 2025 research, the group maintained persistent operations between November 2022 and November 2024, targeting victims…
-
Israeli Organizations Targeted by AV-Themed Malicious Word and PDF Files
SEQRITE Labs’ Advanced Persistent Threat (APT) Team has uncovered a sophisticated campaign targeting Israeli organizations through weaponized Microsoft Word and PDF documents disguised as legitimate antivirus software. The operation, tracked as UNG0801 or >>Operation IconCat,
-
NtKiller Malware Advertised on Dark Web With Claims of Antivirus and EDR Bypass
A new and sophisticated defensive evasion tool dubbed >>NtKillerAlphaGhoul.
-
Recent Cyber Attacks and Threat Actor Activity: A Deep Dive into the Evolving Threat Landscape
Executive Overview Over the past week, global threat activity has highlighted a critical reality: modern cyber attacks are faster, more coordinated, and increasingly industrialized. From mass exploitation of web application vulnerabilities to ransomware-as-a-service operations and record-breaking volumetric DDoS attacks, adversaries continue to evolve both tactically and operationally. This article provides a deep analytical overview of…
-
Real-World Cyber Attack Detection: How Modern SOCs Identify, Block, and Contain Advanced Threats
Executive Summary Modern cyberattacks rarely appear as a single, obvious incident. Instead, they manifest as multiple low-level signals across web, endpoint, DNS, cloud, and network telemetry. When analyzed in isolation, these signals may seem benign. When correlated intelligently, they reveal active attack campaigns targeting applications, identities, cloud storage, and network boundaries. This article presents a…
-
Getting a Tighter Grip on Third-Party AI Risk in Healthcare
Third-party security threats remain one of the most critical risks facing the healthcare sector. But now the increasing use of artificial intelligence by vendors adds a new layer of third-party concerns, said independent consultant Rick Doten, former healthplan CISO at Centene Corp. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/interviews/getting-tighter-grip-on-third-party-ai-risk-in-healthcare-i-5512