Threat actors behind a notorious click-fraud botnet have set their sights on vehicle infotainment modules and are abusing legitimate functionality to spread infections.

darkreading.com22 août

Cyber Arnaque

Cl0p Ransomware Group Names Over 40 Victims of PTC Windchill Campaign

Cl0p claims over 40 organizations fell victim to attacks exploiting a PTC Windchill and FlexPLM vulnerability.

securityaffairs.com21 août

Développement

Rust Supply-Chain Attack: arrayref 0.3.10 and the proc-macro1 Typosquat

North Korean hackers compromised the popular arrayref package in a supply chain attack targeting the Rust ecosystem.

securityweek.com20 août

Cyber Arnaque

Beyond the Buzz: Why Zero Trust Matters More in the Age of AI

Explores how Zero Trust, IAM, and AI data security create trust in the AI economy amid deepfake threats.

cloudsecurityalliance.org20 août

Cyber Arnaque

Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000

A suspected ransomware affiliate is posing as a ransomware recovery service called "Ransom Busters," contacting the victims before the attacks become public and claiming to be able to provide decryption keys and delete stolen data for a fee.

bleepingcomputer.com19 août

Cybersécurité

SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs

Suspected military-grade hackers based in China used artificial intelligence to develop malware in a campaign to penetrate Central Asian governments.

therecord.media19 août

Cyber Arnaque

'Ransom Busters': Ransomware Actor Poses as Incident-Recovery Service

Justin Timothy reports: The GuidePoint Research and Intelligence Team (GRIT) has responded to several recent ransomware incidents in which victims received an unexpected email from an ostensible third-party entity referring to itself as “Ransom Busters.” In these messages, the third-party offers ...

databreaches.net19 août

Cyber Arnaque

StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data

StopAndProtect turned nearly 2K hacked WordPress sites into a criminal network for malware delivery, data theft, surveillance and ransomware

securityaffairs.com19 août

Cybersécurité

More than 200 victims of Medusa ransomware identified over the last year, CISA says

Medusa ransomware has breached over 500 organizations since 2021, CISA, FBI, and HHS warn in an updated advisory.

helpnetsecurity.com18 août

Intelligence Artificielle

Conflicting Test Goals Pushed Claude Agents to Deploy Self-Replicating Malware

Three testing models with the same goal but different directives engaged in "increasingly aggressive" territorial attacks on one another, according to Anthropic.

darkreading.com18 août

Cybersécurité

Crooks Are Buying Your Expired Domains and Using Them to Deliver Malware

Attackers are buying expired domains to exploit their reputation, traffic and DNS history, using them for malware delivery, scams and C2 infrastructure.

securityaffairs.com17 août

Google

Android malware combo takes out loans and relays victims' credit cards

Group-IB discovered WindRelay, a new Android malware built to capture live payment card data over NFC and relay it to attackers in real time.

helpnetsecurity.com14 août

Apple

AmnesiaStealer: a multi-stage Rust-based macOS infostealer that hijacks Chromium browsers

Une nouvelle menace informatique cible les ordinateurs fonctionnant sous macOS en s'attaquant aux données de navigation et aux identifiants. Baptisé du doux nom d'AmnesiaStealer, ce programme développé en langage Rust combine le vol de fichiers confidentiels avec une prise de contrôle à distance des sessions web.

clubic.com14 août

Cyber Arnaque

The Model Is the Malware | What Four Agentic Intrusions Tell Defenders

OpenAI, Anthropic and Meta disclosed agents reaching external systems. The tools didn't matter, and that changes the playbook for investigating intrusions.

sentinelone.com14 août

Cyber Arnaque

WhatsApp Unveils New Scam Alert Feature

WhatsApp has begun rolling out a new optional "Scam Alert" feature, which uses a local machine learning model to warn users when scammers are targeting them.

bleepingcomputer.com13 août

Cyber Arnaque

New StormEncryptor ransomware used by former Medusa affiliate

Microsoft says China-linked Storm-1175 is using a new ransomware called StormEncryptor, replacing Medusa in its latest attacks.

securityaffairs.com13 août

Cyber Arnaque

Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks

The ransomware-as-a-service operation is finding success against critical infrastructure targets with leaked Conti code and old flaws in firewalls and VPN appliances.

darkreading.com12 août

Cyber Arnaque

DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure

The DeadLock ransomware operation is using a decentralized infrastructure that relies on blockchain-backed services to protect its communication with victims and data-leak activity.

bleepingcomputer.com11 août

Grand public numérique

New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA

Why passkey apps treat Windows differently than other operating systems.

feeds.arstechnica.com11 août

← PrécédentPage 5 / 9Suivant →