Tag: threat
-
The Top 4 Threats We Found by Investigating Every Alert for a Quarter
Identity was the target in roughly half of all confirmed malicious activity. Prophet Security breaks down the four main attack patterns seen across customer environments between May and July 2026, and explains why some attacks succeeded while others were blocked. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/the-top-4-threats-we-found-by-investigating-every-alert-for-a-quarter/
-
CISA Updates Insider Threat Guide With New Mitigation Advice
CISA has updated its insider threat guide with new advice on remote work, AI and risk detection First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cisa-updates-insider-threat-guide/
-
Hackers Steal Active Directory Password Hashes Without Attacking Domain Controllers Directly
Threat actors are increasingly exploiting Active Directory replication mechanisms to steal password hashes without directly compromising a domain controller. This technique, known as DCSync, allows attackers with privileged domain credentials to impersonate a legitimate domain controller and request sensitive directory replication data. Unlike noisy attacks that use malware on servers or attempt to extract credentials…
-
FBI Publishes First-Ever Cyber Strategy, With Focus on Disrupting Threat Actors
The new document appears to be part of a broader shift by the US government towards the proactive disruption of cyber threat actors First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/fbi-cyber-strategy-disrupting/
-
Fake GTA 6 Installer Steals Browser Passwords, Discord Tokens and Crypto Data From Gamers
Tags: credentials, crypto, cyber, cybercrime, data, exploit, malware, password, ransomware, theft, threatThreat actors are exploiting anticipation around Grand Theft Auto VI by pushing fraudulent “leaked” game downloads that install a layered malware bundle that steals browser credentials, Discord tokens, gaming-session data, and cryptocurrency-related information. A Chaos ransomware variant used as a wiper, and an unexpected Yandex Browser installer. The campaign demonstrates how cybercriminals are turning one…
-
The 12 Best Mobile Threat Defense (MTD) Solutions, Compared and Priced
Best value overall: Microsoft Defender for Endpoint mobile threat defence is included in appropriate Defender licensing, which means many organizations already own it. Best detection: Zimperium, with fully on-device analysis. Best for Apple estates on Jamf: Jamf. Best privacy positioning: Pradeo and Zimperium, both of which can analyse without shipping your traffic to a cloud.…
-
The 12 Best Mobile Threat Defense (MTD) Solutions, Compared and Priced
Best value overall: Microsoft Defender for Endpoint mobile threat defence is included in appropriate Defender licensing, which means many organizations already own it. Best detection: Zimperium, with fully on-device analysis. Best for Apple estates on Jamf: Jamf. Best privacy positioning: Pradeo and Zimperium, both of which can analyse without shipping your traffic to a cloud.…
-
The 12 Best Mobile Threat Defense (MTD) Solutions, Compared and Priced
Best value overall: Microsoft Defender for Endpoint mobile threat defence is included in appropriate Defender licensing, which means many organizations already own it. Best detection: Zimperium, with fully on-device analysis. Best for Apple estates on Jamf: Jamf. Best privacy positioning: Pradeo and Zimperium, both of which can analyse without shipping your traffic to a cloud.…
-
Trezor warns users of email provider breach, phishing attacks
Trezor warned customers on Wednesday that threat actors who breached its third-party email provider are targeting them in phishing attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/trezor-warns-users-of-email-provider-breach-phishing-attacks/
-
Four Nation-State Actors Used the Same Chrome Zero-Day Exploit Kit Within 12 Days
Four espionage groups used the BlueMoon Chrome+Windows exploit kit within 12 days. Researchers suspect AI development. Proofpoint published a detailed analysis of a Chrome-and-Windows exploit kit it tracks as BlueMoon that four nation-state actors adopted within roughly two weeks of the first observed use. Google’s Threat Intelligence Group, Microsoft’s MSTIC, and Volexity all contributed to…
-
Hackers Use LLMs to Generate Exploit Scripts and Automate Post-Exploitation Across Latin America
Threat actors targeting organizations across Latin America are increasingly embedding commercial large language models (LLMs) into intrusion workflows, using AI-assisted scripting, troubleshooting, and proxy deployment to accelerate post-exploitation and data theft. The campaigns show that AI is no longer limited to phishing, content generation, or reconnaissance. Instead, attackers appear to be using LLMs as an…
-
Hackers Deploy Hundreds of AI Agents to Compromise 440 PaperCut Servers
Tags: ai, authentication, cve, cyber, exploit, flaw, hacker, intelligence, russia, threat, vulnerabilityThreat intelligence firm GreyNoise has identified an AI-driven intrusion campaign, likely orchestrated by a Russian-speaking threat actor, that compromised at least 440 PaperCut NG/MF servers across 395 organizations in 48 countries. This campaign began on August 31, 2026, exploiting two vulnerabilities in PaperCut: CVE-2026-81578, an authentication bypass flaw, and CVE-2026-82078, a vulnerability that allows unsafe…
-
China-Linked Hackers Exploit Chrome and Windows Zero-Days in BlueMoon Attacks
Researcher has discovered a rapidly spreading exploit kit called BlueMoon, which combines vulnerabilities in the Chrome browser with a Windows kernel privilege-escalation flaw to compromise targets in espionage campaigns. This activity was first observed on August 28, 2026, and at least four threat clusters have adopted it, most of which are suspected to have ties…
-
Factor Accuses SecurityScorecard of Retaliation Campaign
Factor Complaint Alleges False IP Claims, Threats and Commercial Interference. Factor Cybersecurity sued SecurityScorecard over alleged business interference, claiming false IP accusations, retaliation and interference with employees, partners and investors cost Factor prospective business and delayed a funding round targeted at $25 million. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/factor-accuses-securityscorecard-retaliation-campaign-a-32785
-
Chinese espionage groups swarm to exploit triple-link chain of zero-days
Multiple China-aligned threat groups exploited the defects quickly to target various organizations. Proofpoint said the activity is ongoing and expects it to widen. First seen on cyberscoop.com Jump to article: cyberscoop.com/china-espionage-groups-exploit-chain-zero-days/
-
Chinese espionage groups swarm to exploit triple-link chain of zero-days
Multiple China-aligned threat groups exploited the defects quickly to target various organizations. Proofpoint said the activity is ongoing and expects it to widen. First seen on cyberscoop.com Jump to article: cyberscoop.com/china-espionage-groups-exploit-chain-zero-days/
-
Chinese espionage groups swarm to exploit triple-link chain of zero-days
Multiple China-aligned threat groups exploited the defects quickly to target various organizations. Proofpoint said the activity is ongoing and expects it to widen. First seen on cyberscoop.com Jump to article: cyberscoop.com/china-espionage-groups-exploit-chain-zero-days/
-
This $50 lifetime VPN adds AI-powered protection to your connection
Get AI-powered threat protection, encrypted connections, and more with this VPN lifetime subscription today. The post This $50 lifetime VPN adds AI-powered protection to your connection appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/ghostshield-vpn-lifetime-subscription/
-
AdaptHealth confirms 4.1 million people exposed in July cyberattack
Healthcare company AdaptHealth has confirmed that data of 4.1 million people was exposed in a cyberattack discovered in July that was attributed to the ShinyHunters threat group. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/adapthealth-confirms-41-million-people-exposed-in-july-cyberattack/
-
Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week
Multiple espionage-motivated threat activity clusters have been found deploying a previously undocumented exploit kit called BlueMoon that chains together multiple vulnerabilities in Microsoft Windows and Google Chrome.The first in-the-wild use of BlueMoon has been attributed to the China-aligned state-sponsored group tracked as APT31 (aka Bronze Vinewood, Judgement Panda, JungleBamboo, First seen on thehackernews.com Jump to…
-
Securing AI Agents at Runtime
Arcjet founder David Mytton joins Alan Shimel to unpack why AI agent runtime security is the new frontier, every tool call as a policy decision, behavior drift as a first-class threat, and what buyers should ask for in a noisy market. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/securing-ai-agents-at-runtime/
-
The High-Stakes Impersonation Threat Targeting Portfolio Companies and Fund Closes
Tags: threatIn private equity and venture capital, trust is the asset that actually moves money. A single transaction can represent hundreds of millions of dollars, riding on relationships with limited partners and reputations that took decades to build. So it’s no… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/the-high-stakes-impersonation-threat-targeting-portfolio-companies-and-fund-closes/
-
Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution
A previously undocumented financially motivated threat actor has been linked to attacks targeting Brazilian financial institutions since at least March 2026.Cybersecurity company CrowdStrike is tracking the Brazil-based activity cluster under the name Slim Spider.”The adversary demonstrates deep operational knowledge of Brazilian financial infrastructure, including the instant payment First seen on thehackernews.com Jump to article: thehackernews.com/2026/09/slim-spider-steals-crypto-custody.html
-
N-able issues patch for zero-day flaw
Security researchers warned the company of unusual threat activity in a recently patched N-able environment. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/n-able-issues-patch-zero-day-flaw/829808/
-
Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hours
Threat actors are continuing to leverage artificial intelligence (AI) to streamline their operations, with one financially motivated hacking group employing an autonomous, multi-agent attack framework to carry out a large-scale credential harvesting campaign within six hours.Google Threat Intelligence Group (GTIG) said it has observed attackers with diverse motivations targeting proprietary AI First seen on thehackernews.com…
-
Threat actors are giving AI agents a bigger role in cyberattacks
AI agents are automating parts of cyberattacks with less human involvement, including vulnerability scanning, credential harvesting, and troubleshooting, according to Google … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/09/08/ai-agents-cyberattacks-automation-google-research/