Collecting Cyber-News from over 60 sources

Tag: tool

U.S. military contractor likely built iPhone hacking tools used by Russian spies in Ukraine

Mar 10, 2026 7:49 PM

Tags: cybercrime, defense, espionage, google, government, group, hacking, iphone, military, russia, tool, ukraine

Google found a series of hacking tools they said were used by a Russian espionage group and a cybercriminal group in China. Sources from a U.S. government defense contractor said some of those hacking tools were theirs. First seen on techcrunch.com Jump to article: techcrunch.com/2026/03/10/us-military-contractor-likely-built-iphone-hacking-tools-used-by-russian-spies-in-ukraine/
Iranian MOIS Actors the Cyber Crime Connection

Mar 10, 2026 6:46 PM

Tags: crime, cyber, iran, service, tool

ey Points Iran-linked actors are increasingly engaging with the cyber crime ecosystem. Their activity suggests a growing reliance on criminal tools, services, and operational models in support of state objectives. Iranian actors have long used cyber crime and hacktivism as cover for destructive activity, but the trend now suggests direct engagement with the criminal ecosystem.…
Iranian MOIS Actors the Cyber Crime Connection

Mar 10, 2026 6:46 PM

Tags: crime, cyber, iran, service, tool

ey Points Iran-linked actors are increasingly engaging with the cyber crime ecosystem. Their activity suggests a growing reliance on criminal tools, services, and operational models in support of state objectives. Iranian actors have long used cyber crime and hacktivism as cover for destructive activity, but the trend now suggests direct engagement with the criminal ecosystem.…
Closed Loop Security: Zero Trust, C2C Ransomware Defense

Mar 10, 2026 5:47 PM

Tags: access, cybersecurity, defense, ransomware, service, tool, zero-trust

<div cla In Part 1 of this series, we established the core problem facing cybersecurity today: it still operates as an open-loop system. Tools detect alerts, behaviors, and anomalies, but they do not enforce whether systems remain in a known-good, trusted state. As a result, security teams are perpetually reacting to symptoms rather than preventing…
An iPhone-hacking toolkit used by Russian spies likely came from US military contractor

Mar 10, 2026 5:47 PM

Tags: cybercrime, defense, espionage, google, government, group, hacking, iphone, military, russia, tool

Google found a series of hacking tools they said were used by a Russian espionage group and a cybercriminal group in China. Sources from a U.S. government defense contractor said some of those hacking tools were theirs. First seen on techcrunch.com Jump to article: techcrunch.com/2026/03/09/an-iphone-hacking-toolkit-used-by-russian-spies-likely-came-from-u-s-military-contractor/
KI-Transformation im Unternehmensumfeld Wenn ein KI-Tool nicht ausreicht

Mar 10, 2026 5:47 PM

Tags: ai, tool

Die KI-Transformation im Unternehmensumfeld ist in vollem Gang. Die Diskussionen werden nicht länger über isolierte Chatbots geführt, die am Rande der Unternehmen agieren. Stattdessen dreht sie sich um die rasche Verbreitung von Multi-Agenten-Systemen als neues zugrundeliegendes Betriebssystem, mit dem Unternehmen ihre digitalen Workflows kreieren, ausführen und skalieren. Es geht nicht mehr darum, das am besten…
The Economic Argument: The Real Cost of Insecure APIs in the AI Era

Mar 10, 2026 3:48 PM

Tags: access, ai, api, application-security, attack, business, compliance, control, corporate, cybersecurity, data, defense, exploit, finance, flaw, framework, governance, identity, injection, international, jobs, malicious, privacy, regulation, risk, threat, tool, vulnerability

When cybersecurity teams talk about risk, they usually speak in technical terms like vulnerabilities, exploits, and attack vectors. But when they walk into the boardroom, they need to speak a different language. They need to speak about cost. In the era of AI, the cost of insecure APIs has shifted from a potential liability to…
Top 10 Best Anti-Phishing Tools in 2026

Mar 10, 2026 3:48 PM

Tags: ai, business, cyber, cybersecurity, deep-fake, email, exploit, phishing, spam, threat, tool

The cybersecurity landscape has shifted dramatically, and traditional spam filters are no longer enough to protect sensitive enterprise data. As we navigate through 2026, threat actors are leveraging sophisticated AI-powered exploits to bypass standard security protocols, craft hyper-realistic deepfake audio messages, and execute highly targeted Business Email Compromise (BEC) campaigns. Phishing has evolved from obvious,…
Die stille Bedrohung: Wie Schatten-KI die Unternehmen gefährdet

Mar 10, 2026 3:48 PM

Tags: ai, compliance, tool

Fehlen im Unternehmens-Stack passende Tools, greifen Mitarbeitende gerne zur Selbsthilfe. Schnell landen private Messenger-Dienste oder andere Apps auf den Rechnern mit potenziell problematischen Folgen für Compliance und Datenschutz. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/die-stille-bedrohung-wie-schatten-ki-die-unternehmen-gefaehrdet/a44058/
Die stille Bedrohung: Wie Schatten-KI die Unternehmen gefährdet

Mar 10, 2026 3:48 PM

Tags: ai, compliance, tool

Fehlen im Unternehmens-Stack passende Tools, greifen Mitarbeitende gerne zur Selbsthilfe. Schnell landen private Messenger-Dienste oder andere Apps auf den Rechnern mit potenziell problematischen Folgen für Compliance und Datenschutz. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/die-stille-bedrohung-wie-schatten-ki-die-unternehmen-gefaehrdet/a44058/
LeakyLooker: Hacking Google Cloud’s Data via Dangerous Looker Studio Vulnerabilities

Mar 10, 2026 2:47 PM

Tags: access, api, attack, authentication, breach, business, cloud, control, credentials, data, data-breach, email, exploit, flaw, google, group, guide, hacking, identity, infrastructure, injection, intelligence, jobs, leak, malicious, mitigation, monitoring, network, oracle, password, programming, service, sql, tool, unauthorized, update, vulnerability

Tenable Research revealed “LeakyLooker,” a set of nine novel cross-tenant vulnerabilities in Google Looker Studio. These flaws could have let attackers exfiltrate or modify data across Google services like BigQuery and Google Sheets. Google has since remediated all identified issues. We discovered and disclosed nine novel cross-tenant vulnerabilities in Google Looker Studio (formerly Data Studio).…
Threat actors use custom AuraInspector to harvest data from Salesforce systems

Mar 10, 2026 2:47 PM

Tags: access, cloud, data, exploit, threat, tool

Attackers are mass-scanning Salesforce Experience Cloud sites using a modified AuraInspector tool to exploit misconfigurations and access sensitive data. Salesforce CSOC warns that threat actors are mass-scanning publicly accessible Experience Cloud sites using a modified version of the AuraInspector tool. AuraInspector is an open”‘source command”‘line tool released by Google/Mandiant to audit Salesforce Aura and Experience…
Attackers Use Malformed ZIP Archives to Evade Antivirus and EDR Tools

Mar 10, 2026 2:47 PM

Tags: antivirus, cyber, cybersecurity, detection, edr, endpoint, malicious, threat, tool

Cybersecurity researchers at the CERT Coordination Center (CERT/CC) have issued a warning regarding a newly disclosed evasion technique tracked as VU#976247. Threat actors are increasingly utilizing malformed ZIP archives to bypass Antivirus (AV) and Endpoint Detection and Response (EDR) scanning engines. By manipulating the internal headers of these archives, attackers can successfully hide malicious payloads,…
Devs looking for OpenClaw get served a GhostClaw RAT

Mar 10, 2026 1:47 PM

Tags: access, apple, credentials, crypto, data, detection, email, malware, password, rat, service, theft, tool

From password theft to persistence: The second stage malware, internally referred to as “GhostLoader,” is a large JavaScript bundle implementing both an infostealer and a remote access framework. Once launched, GhostLoader installs itself into a hidden directory disguised as an npm telemetry service and sets up persistence mechanisms which include shell configuration hooks that automatically…
Polish cops bust alleged teen DDoS kit sellers youngest just 12

Mar 10, 2026 1:47 PM

Tags: attack, ddos, tool

Kids profited from tools used to attack popular websites, say officials First seen on theregister.com Jump to article: www.theregister.com/2026/03/10/poland_ddos_teens_bust/
How to Stop AI Data Leaks: A Webinar Guide to Auditing Modern Agentic Workflows

Mar 10, 2026 1:47 PM

Tags: ai, data, email, guide, intelligence, leak, software, tool

Artificial Intelligence (AI) is no longer just a tool we talk to; it is a tool that does things for us. These are called AI Agents. They can send emails, move data, and even manage software on their own.But there is a problem. While these agents make work faster, they also open a new “back…
The OT security time bomb: Why legacy industrial systems are the biggest cyber risk nobody wants to fix

Mar 10, 2026 12:47 PM

Tags: access, attack, authentication, awareness, business, ciso, compliance, control, cyber, cybersecurity, data, detection, exploit, firewall, incident, incident response, infrastructure, insurance, ISO-27001, metric, mfa, monitoring, network, office, phishing, ransomware, regulation, resilience, risk, risk-management, service, siem, soc, stuxnet, supply-chain, tool, vpn, vulnerability, zero-day

Why everyone knows it’s burning, but nobody pulls the fire alarm: When I talk to OT managers, production leads or plant engineers, I rarely hear, “We didn’t know we had a problem.” Far more often, it’s, “We know it’s critical, but we can’t just shut it down.” This gap between awareness and action is the…
Teen crew caught selling DDoS attack tools

Mar 10, 2026 12:47 PM

Tags: attack, cybercrime, ddos, tool

Seven minors who distributed online programs designed to facilitate DDoS attacks have been identified by Poland’s Central Bureau for Combating Cybercrime (CBZC). They were … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/03/10/poland-minors-identified-distributing-ddos-attack-tools/
This spy tool has been quietly stealing data for years

Mar 10, 2026 12:47 PM

Tags: data, spy, tool

ESET researchers have traced the resurgence of Sednit through a modern toolkit built around two complementary implants, BeardShell and Covenant, each relying on a separate … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/03/10/sednit-espionage-toolkit-stealing-data/
Leading Myanmar Fleet Management Company Yoma Fleet Selects AccuKnox SIEM to Replace Legacy Tools

Mar 10, 2026 12:47 PM

Tags: cloud, cyber, cybersecurity, siem, tool, usa, zero-trust

Menlo Park, USA, March 10th, 2026, CyberNewswire AccuKnox, a leading Zero Trust Cloud-Native Application Protection Platform (CNAPP), today announced that Yoma Fleet, a premier fleet management and leasing company in Myanmar, has selected AccuKnox SIEM to secure its operations and enhance its cybersecurity infrastructure. Yoma Fleet, a part of the Singapore-listed Yoma Strategic Holdings Ltd,…
MIND is the first data security company to achieve ISO 42001 certification

Mar 10, 2026 11:46 AM

Tags: ai, automation, breach, control, data, framework, governance, incident response, international, monitoring, organized, risk, risk-assessment, tool

AI is embedded in security tools across the enterprise. MIND is the first data security company to answer how their AI is governed, audited and held accountable. The AI tools built into your security stack are making decisions at a scale no human team can match. They’re classifying data, scoring risk, triggering enforcement and shaping…
New Claude tool uses AI agents to find bugs in pull requests

Mar 10, 2026 11:46 AM

Tags: ai, tool

Anthropic’s Claude Code Review is a new tool, available as a research preview beta for Team and Enterprise plans, that sends a team of AI agents to examine every pull request. … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/03/10/anthropic-claude-code-review/
APT28 hackers deploy customized variant of Covenant open-source tool

Mar 10, 2026 11:46 AM

Tags: espionage, exploit, framework, group, hacker, open-source, russia, threat, tool

The Russian state-sponsored APT28 threat group is using a custom variant of the open-source Covenant post-exploitation framework for long-term espionage operations. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/apt28-hackers-deploy-customized-variant-of-covenant-open-source-tool/
Why access decisions are becoming the weakest link in identity security

Mar 10, 2026 10:47 AM

Tags: access, ai, api, attack, authentication, automation, breach, business, ciso, control, credentials, data, finance, governance, group, iam, identity, least-privilege, login, okta, radius, risk, saas, service, technology, tool

The SSO fallacy: Why authentication is not a guarantee: I’m often asked by business and technology leaders, “If we have SSO enabled, why do we still need to worry about granular access controls?” The underlying assumption is that once a user is authenticated through a central, secure portal, the hard work is done.In practice, SSO…
Leading Myanmar Fleet Management Company Yoma Fleet Selects AccuKnox SIEM to Replace Legacy Tools

Mar 10, 2026 10:47 AM

Tags: siem, tool, usa

Menlo Park, USA, 10th March 2026, CyberNewswire First seen on hackread.com Jump to article: hackread.com/leading-myanmar-fleet-management-company-yoma-fleet-selects-accuknox-siem-to-replace-legacy-tools/
I replaced manual pen tests with automation. Here’s what I learned.

Mar 10, 2026 9:48 AM

Tags: access, attack, breach, control, cvss, detection, exploit, infrastructure, intelligence, password, penetration-testing, ransomware, RedTeam, resilience, risk, service, siem, soc, tactics, tool, training, update, vulnerability, zero-day

The remediation black hole: Perhaps most frustrating was what happened after we received findings. Our teams would work diligently to implement fixes, but we rarely had the budget or opportunity to bring testers back to validate remediation. We were left with uncertainty. This gap between identification and verification created a dangerous blind spot in our…
Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool

Mar 10, 2026 9:48 AM

Tags: access, cloud, exploit, open-source, threat, tool

Salesforce has warned of an increase in threat actor activity that’s aimed at exploiting misconfigurations in publicly accessible Experience Cloud sites by making use of a customized version of an open-source tool called AuraInspector.The activity, per the company, involves the exploitation of customers’ overly permissive Experience Cloud guest user configurations to obtain access to sensitive…
When AI safety constrains defenders more than attackers

Mar 10, 2026 8:47 AM

Tags: access, ai, attack, authentication, awareness, business, chatgpt, ciso, control, defense, detection, email, exploit, framework, LLM, malicious, malware, marketplace, microsoft, offense, open-source, openai, penetration-testing, phishing, RedTeam, service, social-engineering, spear-phishing, strategy, threat, tool, training, usa, vulnerability

The attacker advantage: Threat actors operate under no such constraints. They simply use jailbroken models, locally hosted open-source alternatives, or purpose-built malicious tools that have proliferated across underground markets.WormGPT, originally shut down in 2023, has reappeared largely as a recycled brand name for uncensored AI tools. New variants posted on underground marketplace BreachForums between October…
When AI safety constrains defenders more than attackers

Mar 10, 2026 8:47 AM

Tags: access, ai, attack, authentication, awareness, business, chatgpt, ciso, control, defense, detection, email, exploit, framework, LLM, malicious, malware, marketplace, microsoft, offense, open-source, openai, penetration-testing, phishing, RedTeam, service, social-engineering, spear-phishing, strategy, threat, tool, training, usa, vulnerability

The attacker advantage: Threat actors operate under no such constraints. They simply use jailbroken models, locally hosted open-source alternatives, or purpose-built malicious tools that have proliferated across underground markets.WormGPT, originally shut down in 2023, has reappeared largely as a recycled brand name for uncensored AI tools. New variants posted on underground marketplace BreachForums between October…
Neue Malware-as-a-Service tarnt sich als RMM-Tool – Malware für 300 Dollar im Monat mieten

Mar 10, 2026 8:47 AM

Tags: malware, service, tool

First seen on security-insider.de Jump to article: www.security-insider.de/trustconnect-malware-as-a-service-300-dollar-a-7f2c6fa4d2d3ec946877c63c5a5bf01a/