A threat actor managed to obtain Salesforce OAuth tokens from a third-party integration called Salesloft Drift and used the tokens to download large volumes of […]
New ZipLine Campaign Targets Critical Manufacturing Firms with In-Memory MixShell Malware
Check Point Research has uncovered a highly persistent phishing operation dubbed ZipLine, which reverses traditional attack vectors by exploiting victims’ own “Contact Us” web forms […]
Critical Docker Desktop flaw allows container escape
Users of Docker Desktop on Windows and Mac are urged to upgrade to the latest version to patch a critical vulnerability that could allow an […]
APT36 Targets Indian BOSS Linux Using Weaponized .desktop Shortcut Files
Researchers have unveiled ONEFLIP, a novel inference-time backdoor attack that compromises full-precision deep neural networks (DNNs) by flipping just one bit in the model’s weights, […]
Malicious Scanning Waves Slam Remote Desktop Services
Researchers say the huge spike of coordinated scanning for Microsoft RDP services could indicate the existence of a new, as-yet-undisclosed vulnerability. The original article found […]
1M Farmers Insurance Customer Data Compromised
Though the company is informing its customers of the breach, Farmers isn’t publicly divulging what kinds of personal data were affected. The original article found […]
Threat Actors Leverage AI Agents to Conduct Social Engineering Attacks
Cybersecurity landscapes are undergoing a paradigm shift as threat actors increasingly deploy agentic AI systems to orchestrate sophisticated social engineering attacks. Unlike reactive generative AI […]
Data I/O Becomes Latest Ransomware Attack Victim
The “incident” led to outages affecting a variety of the tech company’s operations, though the full scope of the breach is unknown. The original article […]
Citrix Under Active Attack Again With Another Zero-Day
The flaw is one of three that the company disclosed affecting its NetScaler ADC and NetScaler Gateway technologies. The original article found on darkreading Read […]
China-Based Threat Actor Mustang Panda’s TTPs Leaked
A significant milestone for cybersecurity experts is the disclosure of specific tactics, methods, and procedures (TTPs) used by Mustang Panda, an advanced persistent threat (APT) […]