1+ day, 21+ hour ago   (471+ words) New analysis of the ExfilSquad data extortion group has tied it to leaked data from at least 13 victims from sectors including government, education, financial services and manufacturing. Fortra Intelligence and Research Experts (FIRE) have reviewed data samples made public by…...

1+ day, 22+ hour ago   (305+ words) A new modular Linux botnet family based on publicly leaked source code from the Mirai botnet has been linked to exploitation attempts for several vulnerabilities in edge devices. A Taiwan-based security researcher at Fortinet’s FortiGuard Labs, Yi Ping (Cara) Lin,…...

1+ day, 23+ hour ago   (741+ words) The Anthropic conflict with the Department of Defense (DoD), in which the agency demanded unrestricted use of the Claude AI model for the military, recently crystallized the challenge the industry has been facing. When a company's privacy commitments meet sufficient…...

2+ day, 1+ hour ago   (603+ words) A new macOS infostealer is being distributed via ClickFix social engineering attacks, researchers from Jamf have warned. The Rust infostealer, dubbed AmnesiaStealer, has multiple stages and objectives once it has infected a victim device, including harvesting credentials, browser data and…...

2+ day, 20+ hour ago   (428+ words) A compromised AWS access key was the likely root cause of the cyber-attack on CRM provider Beacon, which has exposed personal information held by around 1500 UK charities. The software provider said in an August 12 incident update that the access key…...

2+ day, 21+ hour ago   (356+ words) A critical-severity VMware vCenter vulnerability has been exploited within five days of disclosure by Broadcom, with attackers deploying an open-source reverse shell to hold access to compromised systems. The treat research team at German firm Quirso discovered the campaign during…...

2+ day, 20+ hour ago   (298+ words) Google Cloud has divided its post-quantum migration into interim deadlines, targeting its first major risk domain for completion by the end of 2027. The roadmap, published on August 12, organized the work into three risk domains drawn from Google's own quantum threat…...

2+ day, 23+ hour ago   (637+ words) The White House has authorized federal law enforcement agencies to collaborate with private firms in conducting offensive cyber strikes on foreign threat actors targeting the US. The National Security Presidential Memorandum (NSPM), signed by President Donald Trump on August 12, builds…...

3+ day, 2+ hour ago   (512+ words) A ransomware affiliate's attempt to disable security tools by rebooting a victim's system into Safe Mode backfired, with the tactic apparently preventing the malware from successfully encrypting the target's file, according to recent research by Huntress. The managed security specialist…...

3+ day, 3+ hour ago   (400+ words) The UK’s data protection watchdog has issued a reprimand to the Criminal Records Office (ACRO) after multiple security failings led to a 2023 data breach which impacted over 10,000 people. Between August 2022 and March 2023, a hacker gained unauthorized access to ACRO’s website…...