Security Risk Advisors (SRA), a leading cybersecurity consulting firm, today announced the launch of SCALR AI, a customizable platform designed to enable non-technical people to […]
U.S. Treasury Warns Crypto ATMs Are Aiding Criminal Activity
The U.S. Department of the Treasury’s Financial Crimes Enforcement Network (FinCEN) has issued Notice FIN-2025-NTC1, dated August 4, 2025, warning financial institutions about the growing […]
RCE Flaw in AI-Assisted Coding Tool Poses Software Supply Chain Risk
A critical vulnerability in the trust model of Cursor, a fast-growing tool for LLM-assisted development, allows for silent and persistent remote code execution. The original […]
ClickFix Malware Campaign Exploits CAPTCHAs to Spread Cross-Platform Infections
A combination of propagation methods, narrative sophistication, and evasion techniques enabled the social engineering tactic known as ClickFix to take off the way it did […]
Over 10,000 Malicious TikTok Shop Domains Target Users with Malware and Credential Theft
Cybersecurity firm CTM360 has uncovered an ongoing malicious operation dubbed “ClickTok,” specifically targeting TikTok Shop users worldwide through a dual-pronged strategy of phishing and malware […]
Cisco User Data Stolen in Vishing Attack
The networking giant said this week that an employee suffered a voice phishing attack that resulted in the compromise of select user data, including email […]
CISA bringt Open-Source-Plattform für digitale Forensik
Mit Thorium steht Unternehmen nun auch eine Open-Source-Plattform offen, um Malware zu analysieren. Gorodenkoff – shutterstock.com Thorium wurde in Zusammenarbeit mit den Sandia National Laboratories […]
Microsoft Launches Zero-Day Quest Hacking Contest with Rewards Up to $5 Million
Microsoft has unveiled the return of its groundbreaking Zero Day Quest initiative, escalating the stakes in cybersecurity research with a staggering total bounty pool of […]
Kimsuky APT Uses LNK Files to Deploy Reflective Malware and Evade Windows Defender
The North Korean state-sponsored group Kimsuky, also known as APT43, Thallium, and Velvet Chollima, has been accused of launching a recent cyber-espionage campaign in which […]
Surge in Cyber Attacks Targeting AI Infrastructure as Critical Vulnerabilities Emerge
Security researchers discovered 28 distinct zero-day vulnerabilities, seven of which were expressly directed at artificial intelligence infrastructure, in a startling discovery made during the 2025 […]