Explore

AI Agents Breach Company Network, Stealing Root Credentials in Under 10 Hours

AI Agents Breach Company Network, Stealing Root Credentials in Under 10 Hours

A human attacker, utilizing frontier artificial intelligence models and agentic AI frameworks, successfully breached an enterprise network and obtained root credentials in less than 10 hours. This timeline is significantly faster than the approximately two weeks typically required for human red teams to achieve a similar outcome, according to an incident response report from Palo Alto Networks’ Unit 42. The attacker informed Unit 42 investigators during ransom negotiations that the intrusion was automated through AI agents. These agents were directed to monitor, evaluate, act, and re-plan in real-time, compressing over 50 distinct MITRE ATT&CK techniques into a single automated loop. The attack did not rely on zero-day exploits or unusually sophisticated tradecraft, but rather on the operational efficiency provided by AI assistance. After gaining initial access via a publicly accessible web service, the AI agents tunneled into the network, mapped internal microservices, and harvested hard-coded tokens and ...

Why Common WebRTC security pitfalls Looks Different in Production

Why Common WebRTC security pitfalls Looks Different in Production

WebRTC's security model is robust in theory, but in a live production environment, common pitfalls transform into entirely new and complex challenges.

What Okta: a complete product primer Actually Looks Like in a Real Incident

What Okta: a complete product primer Actually Looks Like in a Real Incident

A look at how identity management platforms function during a crisis, contrasting the on-paper promise with the reality of a major security breach.

CyberGuy Identifies Nine Critical Warning Signs of Identity Theft

CyberGuy Identifies Nine Critical Warning Signs of Identity Theft

Kurt 'CyberGuy' Knutsson has outlined nine crucial warning signs that individuals should never ignore regarding potential identity theft. These signs range from subtle clues like unfamiliar credit inquiries or unexpected password reset alerts to more overt indicators such as receiving bills for accounts never opened or a phone suddenly losing service. Knutsson emphasizes that early detection is key to protecting personal finances, credit, and accounts. He advises against panic but stresses the importance of verifying any suspicious activity and paying close attention to anything that seems out of place. The guidance includes practical steps like reviewing data breach notices, checking credit reports from all three major bureaus, monitoring bank and payment app activity, and scrutinizing government notices that don't align with personal actions. The goal is to empower individuals to recognize and act upon these red flags before significant damage occurs.

Regular Router Restarts Recommended for Optimal Home Network Performance

Regular Router Restarts Recommended for Optimal Home Network Performance

Regularly restarting a home internet router is crucial for maintaining a fast and stable home network, according to technology experts. A router, functioning as a small computer, manages data traffic for all connected household devices, including phones, laptops, smart TVs, and other smart gadgets. Over time, its memory can fill up with temporary files, leading to a dip in performance. A simple reboot clears the router's memory and cache, resolving temporary glitches and providing a fresh start. This action also refreshes connections between the router, modem, and internet provider, addressing communication issues. Furthermore, a reboot prompts the router to rescan Wi-Fi channels and select less congested ones, potentially boosting wireless speeds. Security processes are also restarted, which can disrupt certain types of malware and remove temporary connections that could be exploited by attackers. The FBI recommends rebooting when suspicious activity is noticed, while the NSA suggests weekly reboots for a...

IDScan.net Data Breach Exposes 153 Million Driver's License Records, FBI Investigates

IDScan.net Data Breach Exposes 153 Million Driver's License Records, FBI Investigates

A significant data breach at IDScan.net, a Louisiana-based identity verification provider, has allegedly exposed over 153 million U.S. and Canadian driver's license records. A dark web identity theft service named Nexus is reportedly advertising these records for sale. The FBI's New Orleans field office has initiated a formal investigation into the incident, which has also led to multiple lawsuits being filed in Louisiana. Companies that utilized IDScan.net for identity proofing, Know Your Customer (KYC) compliance, or age verification workflows, including major enterprises like Hertz, FedEx, and Target, are now facing immediate third-party risk exposure. These organizations are operating under a presumption-of-exposure basis for any records transmitted to IDScan.net during the breach window, as a full forensic disclosure from IDScan.net or actionable intelligence from the FBI investigation is still pending. The exposed driver's license data is particularly concerning as it enables the construction of high...

Over 153 Million US and Canadian Driver's Licenses Offered for Sale on Dark Web Service

Over 153 Million US and Canadian Driver's Licenses Offered for Sale on Dark Web Service

A new dark-web service named Nexus has begun selling approximately 153 million driver's licenses from the US and Canada, alongside 10 million ID cards and millions of other travel and international identification documents. This information comes from independent security reporter Brian Krebs, who was alerted to the service after cybercriminals posted an example of the files, which included his own license. The volume of records reportedly increased by 400,000 within a 24-hour period. The data appears to originate from an ID verification service, with the perpetrators claiming access to a 'major' verification company. The specific company has not been identified. Following Krebs' report that FBI officials were investigating, the Nexus service was taken offline.

USPS Warns Employees of Ongoing Phone Scams Targeting Login Information

USPS Warns Employees of Ongoing Phone Scams Targeting Login Information

The United States Postal Service (USPS) has issued a warning to its employees regarding persistent phone scams. Criminals are impersonating IT or Service Desk staff in an attempt to steal login credentials from USPS personnel. The USPS explicitly states that it will never contact employees via phone, text, or email to request passwords, multifactor authentication (MFA) codes, or direct them to external websites for login purposes. Employees are reminded not to share their LiteBlue login information, as doing so could lead to unauthorized changes to their accounts. The USPS advises all employees to report any suspicious activity directly to CyberSafe@usps.gov. This alert underscores the ongoing threat of phishing and social engineering tactics targeting corporate and government employees.

Greenberg Traurig Confirms Cyber Attack, Limited Document Access by Unauthorized Actors

Greenberg Traurig Confirms Cyber Attack, Limited Document Access by Unauthorized Actors

Greenberg Traurig Confirms Cyber Attack, Limited Document Access by Unauthorized Actors

153 Million Driver's License Scans Leaked from Identity Verification Vendor

153 Million Driver's License Scans Leaked from Identity Verification Vendor

A dark web service recently advertised and sold digital scans of over 153 million United States and Canadian driver's licenses, along with millions of other identification documents including passports and medical cards. This massive data breach, reported by Brian Krebs, involved photographs of documents, including front and back captures, basic scans, and infrared and ultraviolet captures of security features. The records were collected over approximately a year from the identity verification pipelines of customers of IDScan.net, a New Orleans-based vendor that processes over 21 million verifications monthly. The data originated from ordinary transactions at various locations such as rental car counters, hotel front desks, and retail age checks. The FBI's New Orleans field office initiated an investigation into the service, which subsequently disappeared from the forum.

AI-Powered Ransomware Emerges, Lowering Cybercrime Barriers and Increasing Threat Landscape

AI-Powered Ransomware Emerges, Lowering Cybercrime Barriers and Increasing Threat Landscape

New research indicates that artificial intelligence (AI) is transforming cybercrime, making ransomware attacks more automated, scalable, and significantly less expensive. Security researchers at Cybernews have uncovered a ransomware operation that utilizes AI to conduct attacks, demonstrating a shift from campaigns requiring skilled hackers to those with minimal human involvement. This AI component of an attack can cost as little as US$0.40 to US$4.00 per target organization, excluding broader infrastructure and credential costs. The investigation revealed an exposed server linked to an affiliate of the Gentlemen ransomware group, containing 3.1 terabytes of stolen data from over 30 organizations across various sectors, including healthcare, manufacturing, and telecommunications. An AI agent appears to be managing much of the criminal workflow with limited human oversight, suggesting a move towards autonomous cyber-extortion. This development industrializes cybercrime, allowing less experienced individuals...

NetScout Enhances DDoS Protection to Combat Outbound Botnet Traffic

NetScout Enhances DDoS Protection to Combat Outbound Botnet Traffic

NetScout Enhances DDoS Protection to Combat Outbound Botnet Traffic