Cybercriminals have compromised over 30,000 Fortinet firewalls and VPNs globally in a campaign dubbed FortiBleed. Hackers exploit weak or reused passwords to gain access, using compromised devices to steal more credentials and expand their reach. Major companies like Accenture, Comcast, and Samsung are among the victims.
The FBI has issued a warning about Kali365, a Phishing-as-a-Service platform distributed via Telegram. It enables cybercriminals to steal Microsoft 365 OAuth tokens, bypassing MFA and gaining persistent access to accounts.
Silent Ransom Group, a cybercrime gang, has been targeting law firms with a novel approach, sending fake IT workers in person to steal data via USB drives or remote access, alongside traditional phishing and social engineering tactics.
Kaspersky Lab assisted Interpol in arresting over 200 cybercriminals from the Middle East and North Africa. The operation involved 13 countries, with approximately 400 more individuals suspected of complicity. The criminals used sophisticated phishing schemes to steal money.
CrowdStrike, with Google and Shadowserver, dismantled the Glassworm botnet, which targeted open source software developers to spread malware and steal passwords, compromising over 300 GitHub repositories.
Athletes are increasingly targeted by cybercriminals using AI-driven scams, data breaches, and social media exploitation, with significant financial losses reported in the sports industry.
Cybercriminals are now leveraging AI to discover and exploit unknown software flaws, as revealed by Google's recent interception of a major attack. This development confirms fears about AI-powered hacking, prompting urgent discussions and a cautious approach to releasing advanced AI models. The cybersecurity landscape faces a new arms race as attackers gain speed.
Cybercriminals have reportedly leveraged artificial intelligence to craft a potent hacking tool capable of circumventing security measures in a widely used system administration software. Google's security team uncovered this novel threat, which exploited an unknown vulnerability to bypass multi-factor authentication. The developer was alerted and patched the flaw before it could be weaponized, marking a significant development in AI-driven cyberattacks.
Cybercriminals used an AI model to find and weaponize a previously unknown software flaw, Google's threat team confirmed Monday.
Cybercriminals are now leveraging Microsoft Teams, posing as IT helpdesk staff, to trick employees into revealing credentials and installing malware. Google warns this new tactic involves overwhelming users with spam emails before offering fake technical assistance via Teams. Victims click malicious links, leading to credential theft and the deployment of sophisticated malware for persistent access.
Angelo Martino, a former ransomware negotiator at DigitalMint, pleaded guilty to helping the ALPHV/BlackCat ransomware gang extort companies by feeding them confidential victim information including insurance policy limits and negotiation strategies. He is the third ransomware negotiator in the past year to face jail for this scheme, admitting to playing both sides in five incidents. Martino faces up to 20 years in prison and authorities have seized $10 million in assets.
New research suggests Australians are leaving themselves vulnerable to cybercrime through their public social media accounts.
The FBI announced the dismantling of the W3LL phishing operation, which allegedly targeted over 17,000 victims globally and facilitated over $20 million in fraud by selling phishing kits and stolen credentials.
The FBI and Indonesian law enforcement have dismantled the 'W3LL' phishing operation, a platform that enabled cybercriminals to steal credentials and bypass multi-factor authentication, resulting in over $20 million in attempted fraud.
