In light of new memory safety features added to Apple’s latest iPhone chips that make entire classes of exploits harder to pull off, the company […]
Category: Cyber Security News
RondoDox Botnet: an ‘Exploit Shotgun’ for Edge Vulns
RondoDox takes a hit-and-run, shotgun approach to exploiting bugs in consumer edge devices around the world. ​The original article found on darkreading Read More
FBI seizes BreachForums servers as threatened Salesforce data release deadline approaches
Only days ago, a message on the BreachForums extortion site threatened to leak one billion records allegedly stolen from the Salesforce systems of 39 of […]
Microsoft Adds Agentic AI Capabilities to Sentinel
Microsoft previewed the Sentinel security graph and MCP server at its annual Microsoft Secure virtual event earlier this month. ​The original article found on darkreading […]
SonicWall data breach affects all cloud backup customers
On Sept. 17, security vendor SonicWall announced that cybercriminals had stolen backup files configured for cloud backup. At the time, the company claimed the incident was […]
Feds Shutter ShinyHunters Salesforce Extortion Site
The group warned that law-enforcement crackdowns are imminent in the wake of the takedown, but its extortion threats against Salesforce victims remain active. ​The original […]
DDoS Botnet Aisuru Blankets US ISPs in Record DDoS
The world’s largest and most disruptive botnet is now drawing a majority of its firepower from compromised Internet-of-Things (IoT) devices hosted on U.S. Internet providers […]
Chinese Hackers Use Velociraptor IR Tool in Ransomware Attacks
In a new wrinkle for adversary tactics, the Storm-2603 threat group is abusing the digital forensics and incident response (DFIR) tool to gain persistent access […]
Deepfake Awareness High at Orgs, But Cyber Defenses Badly Lag
The vast majority of organizations are encountering AI-augmented threats, but remain confident in their defenses, despite inadequate detection investment and more than half falling to […]
Stealit Malware Abuses Node.js Single Executable Feature via Game and VPN Installers
Cybersecurity researchers have disclosed details of an active malware campaign called Stealit that has leveraged Node.js’ Single Executable Application (SEA) feature as a way to […]