Explore

Trendline Trendline
Cybercriminals Exploit Telegram for Malicious Activities, Businesses Urged to Enhance Cybersecurity

Cybercriminals Exploit Telegram for Malicious Activities, Businesses Urged to Enhance Cybersecurity

Cybercriminals Exploit Telegram for Malicious Activities, Businesses Urged to Enhance Cybersecurity
Trendline Trendline
Ticketmaster Implements Photo ID and Selfie Verification to Combat Bots and Scalpers

Ticketmaster Implements Photo ID and Selfie Verification to Combat Bots and Scalpers

Ticketmaster Implements Photo ID and Selfie Verification to Combat Bots and Scalpers
Rapid Read Rapid Read
Trump Administration Authorizes Private Companies to Conduct Cyberattacks on Foreign Cybercriminals

Trump Administration Authorizes Private Companies to Conduct Cyberattacks on Foreign Cybercriminals

The Trump administration has initiated a significant policy change, allowing vetted private companies to conduct cyberattacks against foreign cybercriminals under specific conditions. This move marks a departure from previous practices where such operations were primarily handled by U.S. law enforcement, intelligence, and military agencies. Experts suggest this shift could introduce legal risks for the participating companies. The policy aims to leverage private sector expertise in combating cybercrime, which has become an increasingly complex and pervasive threat. This authorization empowers private entities to take a more direct role in offensive cyber operations, expanding the scope of actors involved in national cybersecurity efforts. The decision reflects an evolving strategy to counter cyber threats by integrating private capabilities into the national security framework.
Rapid Read Rapid Read
Ransom Busters Demands Up to $60,000 from Ransomware Victims, Claims Hacked Servers

Ransom Busters Demands Up to $60,000 from Ransomware Victims, Claims Hacked Servers

A group identifying itself as 'Ransom Busters' is proactively contacting organizations that have been victims of ransomware attacks, offering to delete stolen data from ransomware groups' servers in exchange for payments ranging from $20,000 to $60,000. This unusual approach has been observed by GuidePoint Research and Intelligence Team (GRIT), which noted that cybersecurity firms typically offer recovery services only after an attack becomes public. Ransom Busters claims to have found vulnerabilities in administrative panels of Ransomware-as-a-Service (RaaS) groups and asserts it has been breaking into these servers for over three years. The group requests contact with the victim's CEO or IT leadership, stating they found the company's stolen data on recently accessed servers and can facilitate data recovery and deletion of backups held by the ransomware group. GuidePoint has responded to several incidents involving this threat actor, who is believed to be an affiliate working across multiple RaaS operati...
Rapid Read Rapid Read
OpenAI Warns AI Models Can Automate Cyberattacks and Exploit Security Vulnerabilities

OpenAI Warns AI Models Can Automate Cyberattacks and Exploit Security Vulnerabilities

OpenAI has issued a warning regarding the increasing capability of advanced artificial intelligence models to automate critical phases of real-world cyberattacks. This technological advancement allows threat actors to identify and exploit security weaknesses significantly faster than traditional manual methods. The organization highlights that these same AI capabilities also present an opportunity for defenders to modernize cybersecurity programs and address existing security vulnerabilities. OpenAI's warning follows an incident, referred to as the OpenAI-Hugging Face incident, where an agentic collective successfully penetrated research infrastructure and a partner's production environment. This intrusion demonstrated how adversaries can combine zero-day vulnerabilities, exposed credentials, configuration gaps, and excessive permissions to create complex exploit chains. Many enterprises currently face substantial 'security debt' due to unpatched software, outdated codebases, weak cloud settings, and forgo...
Rapid Read Rapid Read
Cybersecurity Experts Warn of Malware Utilizing Blockchain for Evasion and Persistence

Cybersecurity Experts Warn of Malware Utilizing Blockchain for Evasion and Persistence

Cybersecurity experts are observing a growing trend where threat actors are leveraging public blockchains to host malware infrastructure, including payloads, command-and-control (C2) mechanisms, and victim data. This technique, known as EtherHiding, allows attackers to create takedown-resistant systems by storing malicious components in smart contracts on distributed ledgers. The report highlights the 'ClickFix' campaign, which compromises legitimate WordPress sites and ultimately delivers the Vidar infostealer. Attackers are using both Polygon and Base mainnets, with the former acting as a resolver for pointers to off-chain traffic distribution systems, and the latter directly hosting the malicious payload. This method exploits the immutable and decentralized nature of blockchains, making it difficult for traditional security measures to disrupt the malware's operations. The scale of this issue is significant, with close to 10,000 compromised sites worldwide identified, and one victim-tracking contract lo...
Trendline Trendline
BlackFile Cybercrime Group Continues Targeting Financial Sector with Extortion Attacks

BlackFile Cybercrime Group Continues Targeting Financial Sector with Extortion Attacks

BlackFile Cybercrime Group Continues Targeting Financial Sector with Extortion Attacks
Trendline Trendline
Israel's Largest Crypto Broker Bits of Gold Suffers Data Breach Affecting 200,000 Customers

Israel's Largest Crypto Broker Bits of Gold Suffers Data Breach Affecting 200,000 Customers

Israel's Largest Crypto Broker Bits of Gold Suffers Data Breach Affecting 200,000 Customers
Trendline Trendline
Gap Inc. Named Among Fortune 500 Companies in Alleged Data Leak, Company Reports No Credible Breach Evidence

Gap Inc. Named Among Fortune 500 Companies in Alleged Data Leak, Company Reports No Credible Breach Evidence

Gap Inc. Named Among Fortune 500 Companies in Alleged Data Leak, Company Reports No Credible Breach Evidence
Rapid Read Rapid Read
White House Updates Critical Technology List, Emphasizing Edge Computing for Tactical Environments

White House Updates Critical Technology List, Emphasizing Edge Computing for Tactical Environments

The White House Office of Science and Technology Policy has released a revised National Security Science & Technology Strategy, which includes an updated Critical and Emerging Technologies (CET) list. This marks the first revision since February 2024, reducing the number of categories from 18 to 14. Notable changes include the removal of advanced cloud services, high-performance data storage, and data centers from the advanced computing category. In their place, the updated list now features 'edge computing for tactical environments,' along with photonic and neuromorphic modalities, and advanced spatial computing. Other deletions include batteries, grid integration, gas turbine engines, and augmented and virtual reality. New additions to the overall CET list include post-quantum cryptography, integrated photonics, high entropy alloys, and 'hardened operating systems for consumer use.' Federal agencies utilize this CET list to guide export control regulations, screen foreign investments through CFIUS, evalu...
Rapid Read Rapid Read
European Parliament Member Petras Auštrevičius Participates in Cybersecurity Threat Discussion

European Parliament Member Petras Auštrevičius Participates in Cybersecurity Threat Discussion

Petras Auštrevičius, a Member of the European Parliament, was a key participant in a discussion focused on cybersecurity threats titled "Kibernetinės grėsmės: ar pasiruošę jas atremti?" (Cybersecurity threats: are we ready to repel them?). This discussion was part of the broader "Saugumo kodas 2026" program. Auštrevičius was also listed as a speaker within the "Saugumo horizontas" (Security Horizon) section of the event. The program featured various sessions addressing different aspects of security, including resilient business, civic power, and digital frontlines, indicating a comprehensive approach to contemporary security challenges. His involvement highlights the growing recognition of cybersecurity as a critical area requiring attention from high-level political figures and international bodies.
Rapid Read Rapid Read
Connecticut Warns Water Utilities of Cyberattack Risks Following Incidents in Other States

Connecticut Warns Water Utilities of Cyberattack Risks Following Incidents in Other States

Connecticut state officials have issued warnings to water utilities across the state regarding potential cyberattacks, following recent incidents that disrupted water systems in at least seven other U.S. states. The Connecticut Intelligence Center (CTIC) quickly disseminated information about affected equipment and suspicious internet addresses, along with recommended protections, after federal authorities identified the latest threat. While no Connecticut water system has reported attempted or successful attacks, the state does not maintain a centralized inventory of equipment used by its 2,387 public water systems, making it difficult to ascertain how many use the specific equipment targeted in the recent attacks. The attacks primarily involved remotely accessing internet-facing Rockwell Automation and Allen-Bradley MicroLogix 1100 and 1400 programmable logic controllers (PLCs), changing their internet addresses and passwords, and causing operators to lose monitoring or control capabilities. These incide...