cyber security
Cisco Talos Uncovers 1,400 Scam Emails Sent Through Staples and Dell Order Notification Systems
Cisco Talos identified roughly 1,400 scam emails delivered through legitimate Staples and Dell order notification systems, exposing how attackers can insert fraudulent support instructions...
cyber security
New Sirius Backdoor Hides Inside Windows Processes to Steal Passwords and Evade Detection
A previously undocumented Sirius backdoor variant during a priority customer investigation, revealing a multistage campaign that hides malicious code inside legitimate Windows processes.
The...
AI
Hackers Compromise 17 Exposed AI Pentesting Panels to Deploy Malware and Steal Credentials
Attackers have compromised at least 17 internet-exposed Cairn AI penetration-testing panels, turning autonomous security agents against their own infrastructure to steal credentials, establish unauthorized...
cyber security
Hackers Use Google Ads to Push Fake Claude Downloads Hosted on Real Claude.ai Domain
Hackers are buying Google Ads to promote fake Claude download pages hosted on Anthropic’s legitimate claude.ai domain, exploiting content-sharing features to distribute malware.
The...
cyber security
Hackers Abuse Magento CMS Blocks to Infect Online Stores and Evade Malware Detection
Hackers are injecting JavaScript into Magento CMS blocks to maintain access to compromised storefronts while selectively hiding malicious responses from security scanners.
Registered on...
cyber security
Fake Microsoft Teams IT Support Messages Lead to Remote Access and Malware Infections
More than 400 incidents in which attackers abused Microsoft Teams external chats to impersonate IT support, obtain remote access, and deliver malware.
Researchers identified...
cyber security
Microsoft 365 Token Replay Attacks Let Hackers Access Business Emails Without Passwords
Hackers accessed Microsoft 365 environments at 79 organizations by replaying stolen sign-in sessions, letting them enter business accounts without victims’ passwords.
Huntress recorded 497...
cyber security
Hackers Use Instagram Ads to Deploy Coruna and DarkSword Spyware on iPhones
Cybercriminal groups are using malicious Instagram advertisements, abandoned analytics tags, and compromised websites to deliver Coruna and DarkSword exploit kits to vulnerable iPhones.
The investigation...