Blahalla

IBM and Red Hat Commit $5 Billion to Secure Open Source Supply Chains Under “Project Lightwell”

www.securityweek.com · a month ago

Project Lightwell is designed to fix vulnerabilities without breaking what is already in production.
Focus on Cyber Insurance: How Quantifying Risk Is Reshaping Security

www.darkreading.com · a month ago

In this latest installment of the Reporters' Notebook video series, we discuss how cyber insurance is forcing organizations to quantify risk, what's covered (and what's not), and why this could be the best thing to happen to cybersecurity.
GlassWorm falls, but the repo problem is far from solved

www.csoonline.com · a month ago

Taking down a sprawling malware operation once signaled progress in securing the open-source ecosystem. Now, it barely registers. The GlassWorm campaign disruption comes at a moment when attackers can quickly reconstitute, and defenders are increasingly grappling with a new challenge: distinguishing real threats from automated noise. “I think coordinated actions, like GlassWorm, can sever control, significantly increase attacker costs, buy time for remediation, and signal the possibility of a fightback,” said Agnidipta Sarkar, chief evangelist at ColorTokens. “But most takedowns are temporary actions in a long fight.” The CrowdStrike-led takedown, conducted alongside Google and the Shadowserver Foundation, disrupted infrastructure linked to the campaign that had poisoned hundreds of repositories with malicious packages targeting developers. A day after the takedown, in an independent development, the OSV database withdrew 157 malware reports after maintainers determined the submissions were likely automated false positives. Takedowns help, but analysts question long-term impact The takedown happened on May 26, at 14:00 UTC, with CrowdStrike confirming the operation to have struck down “all four of GlassWorm’s command-and-control (C2) channels simultaneously”. This reportedly helped sever the botnet operators from their infected machines, blocking them from pushing out new malware. CrowdStrike described the GlassWorm operation as targeting infrastructure used to distribute malware through developer-focused repositories, an increasingly popular attack vector as adversaries chase CI/CD access, developer credentials, and downstream enterprise environments. GlassWorm was a cross-platform operation affecting Windows, macOS, and Linux systems, with trojanized VSCode extensions and compromised npm and Python packages for information and credential harvesting. “As part of our disruption efforts, we are working with partners to bring more pain to attackers, especially when we see them abusing our products or targeting our users,” said Google Threat Intelligence Group’s (GTIG) chief analyst, John Hultquist, in an X post. Still, the broader economics of repository abuse remain unchanged. Open-source ecosystems continue to offer attackers low-cost distribution, massive reach, and relatively weak identity verification compared to traditional software distribution channels. That means operators behind campaigns like GlassWorm can often reappear quickly under new accounts, domains, or package names. “It is disruption, not eradication,” Sarkar warned. “To build resilience after a takedown, defenders should prioritize rapid post-takedown scanning to detect the reemergence of malicious artifacts across related repositories and distribution platforms. ” They should then establish granular micro-perimeters, build capabilities to contain propagation across workloads, endpoints, IT/OT/IoT/cloud assets, and limit the blast radius of supply-chain compromises (e.g., a poisoned npm package or a GitHub workflow stealing creds can’t easily pivot). Sarkar advised developers and organizations to establish “granular micro-perimeters,” build capabilities to contain propagation across workloads, and limit the blast radius of supply-chain compromises. AI False positives are becoming part of the supply chain problem If GlassWorm highlights the persistence of real malware campaigns, the OSV withdrawal incident exposed a parallel issue affecting the open-source software (OSS) supply chain. It is the growing reliability surrounding automated security reporting. The withdrawal of 157 malware reports believed to be AI-generated false positives matters, especially when it includes packages like FastAPI v0.136.3. FastAPI is a heavily adopted Python framework powering production APIs, AI services, and cloud-native applications across industries. Even a few days of false flagging can trigger costly deployment delays, CI/CD disruptions, and hours of development time in isolating legitimate software. “I would recommend that enterprises be concerned enough about signal-to-noise problems to consider remedial measures, as automation erodes trust in defensive tools,” Sarkar said. “Unless you have a highly microsegmented enterprise, noise wastes analyst time, slows velocity, and risks missing sophisticated attacks amid fatigue.” In 2026, with AI-assisted malware and reporting both accelerating and rising false positives in SAST/SCA tools, defensive automation is getting asymmetrically compounded by supply-chain volume, he noted. In a blog post, Socket called bad OSV records particularly dangerous as the popular database gets rapidly carried through dependency scanners, CI checks, registry controls, SBOM tools, dashboards, and internal policy systems. All hope is not lost, though, as newer tools promise lower reliance on AI for hunting dependency vulnerabilities. CVE Lite CLI, a light-weight, JavaScript and TypeScript dependency vulnerability scanner, is offering developers a way to know dependency risks while they are still writing code, much earlier than failing automated scanners in CI pipelines.
Webinar: Why network incidents take too long to resolve

www.bleepingcomputer.com · a month ago

Many organizations can detect network issues quickly, but investigations and coordination often slow incident resolution. This webinar explores how automation and AI-assisted workflows can help IT teams reduce delays and improve response times.
Malicious Websites Exploit SSD Timing Signals to Monitor Visitor Activity

gbhackers.com · a month ago

Malicious websites can now exploit subtle SSD timing signals in modern browsers to quietly track what users are doing on their devices, including which sites and apps they open, using a new side‑channel technique called FROST. Security researchers Hannesweissteiner have revealed that a single drive‑by visit to a booby‑trapped page is enough for an attacker
New Edamame Platform Aims to Catch AI Coding Agents Going Off the Rails

www.securityweek.com · a month ago

France-based startup Edamame says its runtime verification platform uses host telemetry and AI analysis to detect coding-agent “intent drift,” secret theft and supply-chain attacks in real time.
New AI Usage Report: Enterprise AI Risk Is Heavily Concentrated Among a Small Group of AI "Power users"

thehackernews.com · a month ago

State of AI Usage Report 2026 (full report here) by LayerX Security reveals the extent of the enterprise AI visibility gap and why most organizations still don't understand where their AI exposure is actually coming from. The research shows that enterprise AI risk is not distributed evenly across users or platforms. Instead, it is heavily concentrated among a small group of AI power users and a
Gitea Vulnerability Exposed 30,000 Deployments to Attacks

www.securityweek.com · a month ago

The security flaw allowed attackers to pull private container images, exposing source code, credentials, and infrastructure.
Raising the Cybersecurity Stakes: Ante up for the Agentic Era

www.securityweek.com · a month ago

CISOs are now facing machine-speed attacks and asking, “How do I agent?” The industry must provide remediation at scale.
Carnival Cruise confirms data breach affecting nearly 6 million people

www.bleepingcomputer.com · a month ago

Carnival Corporation, the world's largest cruise line operator, has confirmed a data breach affecting nearly 6 million people claimed by the ShinyHunters extortion gang in April 2026.
VaultJacking Attack Exposes Google Password Vaults via Single PIN

gbhackers.com · a month ago

A newly disclosed phishing technique dubbed “VaultJacking” is raising serious concerns across the cybersecurity community after researchers demonstrated how a single captured Google Password Manager (GPM) PIN can expose an entire user credential vault. The attack shows that even passkeys widely promoted as phishing-resistant can be indirectly compromised when attackers target the underlying sync infrastructure
Top 10 Best Mobile Application Security Testing (MAST) Tools in 2026

gbhackers.com · a month ago

As mobile usage continues to dominate the digital landscape, securing mobile applications has never been more critical. The year 2026 brings new challenges to the table: sophisticated AI-driven cyberattacks, complex vulnerabilities, and the rapid evolution of continuous integration workflows. For enterprises and developers, relying on outdated security measures is no longer a viable strategy; proactive
Gitea Container Registry Vulnerability Could Lead to Private Image Exposure

gbhackers.com · a month ago

A critical vulnerability, tracked as CVE-2026-27771, has been discovered in Gitea’s built-in container registry, allowing unauthenticated remote attackers to access private container images without credentials. This flaw poses a serious risk as it can expose sensitive application data, including source code, secrets, and infrastructure configurations. Due to its severity and ease of exploitation, security experts
AI-Generated npm Malware Leaks Hacker’s Private GitHub Token

gbhackers.com · a month ago

A newly discovered malicious npm package is drawing attention across the cybersecurity community after inadvertently exposing its own operator’s private GitHub token. Identified by OX Security researchers, the package, named mouse5212-super-formatter, operates as an infostealer that silently exfiltrates sensitive files from compromised systems while masquerading as a legitimate development utility. The package, which has already reached
The AI governance imperative you can’t afford to ignore

www.csoonline.com · a month ago

CIOs rushing to roll out AI agents without real visibility into their decision-making processes are flirting with disaster. According to AI experts, deploying agents without observability processes and tools creates a ticking time bomb with the potential for huge negative consequences. Many companies are deploying AI agents and expecting them to increase productivity with little human intervention, observes T.J. Marlin, CEO of AI security firm Guardrail Technologies. That’s the wrong approach, he says. Instead, IT teams need to keep a close eye on agents and adjust policies and practices throughout the agentic process. “It’s not just set it and forget it like a crock pot,” he says. “You don’t put it in the kitchen in the morning with the chicken inside and come back at night and have a great dinner. The organizations doing that are going to be on the front page because they just had some terrible thing happen to them.” Many organizations are rapidly deploying agents because of a fear of missing out, while not understanding the nuances of the technology, Marlin says. Some IT leaders seem to compare agents to robotic process automation, when RPA results are far more deterministic, he adds. “There’s a talent shortage and a knowledge shortage and people are building at pace without checking whether it’s correct and it’s operating as expected,” he says. “Those are all the hallmarks of the worst disasters that I’ve seen across my career.” A recent report from agent governance vendor TrueFoundry puts numbers behind fears of unregulated agents. A survey of more than 200 enterprise AI leaders found that 54% of organizations represented can’t fully trace what their agents are doing and 56% have no centralized agent control or governance layer. While TrueFoundry has an interest in driving agent governance forward, many other AI experts see the same problems. Governing blind Difficulties with governance and observability are major impediments to the deployment of productive agents, and many organizations are deploying agents without creating a centralized list of them, says Mahesh Kumar Goyal, senior data and AI expert at Google. “Most enterprises have no inventory of the agents already running in production, they’re trying to govern what they can’t see,” he says. In addition, traditional SIEM and EDR security tools were built to spot human anomalies, not rogue agents, he notes. “An agent running code perfectly 10,000 times in a row looks normal even if it’s been hijacked,” he says. Running fully autonomous agents is not a good idea, he adds, and organizations need to think about least-privilege scoped tool permissions, policy enforcement layers that mediate every prompt and tool call, and end-to-end tracing that stitches prompts, tool calls, and downstream actions into one auditable trail. “The financial system doesn’t run on trust; it runs on auditability, reconciliation, and circuit breakers,” Goyal says. “Agents will mature the same way. Tiered autonomy is the realistic answer: free rein on low-stakes tasks, human-in-the-loop on consequential ones.” Part of the problem is that agents have upended the models used to determine whether traditional software was running correctly, adds Adel El Hallak, vice president of AI software at Nvidia. With traditional software, QA and security professionals could look at the code to debug problems, but agents make decisions in the runtime environment of an AI model. The source of truth for agents resides in the traces, the records of the execution flow, not in the code, he adds. Collecting traces , in essence, detailed logs, is a start toward agent governance, but organizations need to be able to act on the information, he says. “For you to trust something, it has to be transparent, and observability is foundational to transparency,” El Hallak adds. “But just observing is not enough. We need to be able to take those signals and turn them into something actionable.” Agent governance goes beyond observability to allow organizations to test and fine-tune agents continuously, he says. The tools are out there, with companies like Nvidia building their own internal governance frameworks, and several other vendors offering agent observability and governance tools, he notes. “It’s not enough to just have the behavioral data, to capture the feedback data,” he says. “The system should allow me to annotate, change, augment, or create additional feedback data, and then I can use that data to improve my agent as a whole.” The governance bottleneck At the same time, many companies moving into agent governance have found it can be a huge bottleneck if done wrong, says Nirmal Ganesh, senior director of product management for agentic workflow automation at cloud storage vendor Box. “I don’t believe we are past the hard part yet in terms of deploying agents in the enterprise,” he says. “Most companies are not yet good at those, and far fewer of them have gotten good at running them at scale with agent governance and observability.” Ganesh sees several problems, including agents running without clear permission models. “If an agent can see more than a person or access more than a person’s permission on content or data, that’s an incident is waiting to happen,” he says. However, some early agent governance models don’t scale. Some IT teams have defaulted to a position of humans needing to approve every agent output because that’s the safest option, he says. “In reality, this is rebuilding manual process with more checkpoints or suggestion points,” Ganesh says. “At a high volume, governance is your bottleneck to scale and no longer your safely net.” Organizations need observability and governance processes in place that are both scalable and comprehensive, he adds. Agent ROI will come from strong guardrails, clear permission models, and clear human-in-the-loop involvement, he says. “Every mature automation needs ongoing observability, workflows change, policies change, decisions change, new use cases show up,” he says. “Human intervention is always needed for what changes over time, but we need less intervention for known paths and more focus on exception handling and governance fine-tuning.” Observing output is not enough Governance can’t just focus on agent output, adds Marcelo Lorenzetti, founder and CAIO at legal services AI vendor SavvyLex. “The biggest challenge is not simply whether an agent produces a good answer,” he says. “It is whether the organization can prove what the agent accessed, what instructions it followed, what tools it invoked, what decisions it made, where a human intervened, and whether it stayed within authorized boundaries.” Without a full level of runtime visibility, companies are left with screenshots, logs, and after-the-fact explanations that may not meet legal, compliance, or security requirements, he says. Agents should be continuously verified instead of fully trusted, he adds, with governance engineered into the agent architecture itself. Governance should include role-based access, policy-bound execution, human approval thresholds, source and tool provenance, immutable activity records, confidence scoring, exception handling, and clear escalation paths when an agent reaches the edge of its authority, he recommends. “Observability should not be limited to whether the model responded,” Lorenzetti says. “It should show the full decision path from input to action.” AI agents have shifted the governance model that’s needed, he adds. “The core problem is that many companies are moving from AI that answers questions to AI that takes actions, but their governance models are still built for passive tools, not autonomous workflows,” he says.
2026 World Cup: Discussing The World’s Biggest Game’s Attack Surface

unit42.paloaltonetworks.com · a month ago

The 2026 World Cup presents major cyber risks from ransomware groups, state-aligned actors, and other groups targeting critical infrastructure. Learn more here.
Google Unveils AI Threat Defense Platform to Fight AI-Powered Cyberattacks

www.securityweek.com · a month ago

New AI Threat Defense platform combines capabilities from Mandiant, Wiz and Gemini to help customers fight AI with AI.
Critical Notepad++ Flaw Could Enable Remote Code Execution Attacks

gbhackers.com · a month ago

Notepad++ has released version 8.9.6.1 to address multiple security vulnerabilities, including critical flaws that could allow arbitrary code execution under specific conditions. The update, published on May 26, 2026, patches three vulnerabilities tracked as CVE-2026-48770, CVE-2026-48778, and CVE-2026-48800. These issues affect versions up to 8.9.6 and highlight risks tied to improper handling of configuration files.
Sextortionist sentenced to 33 years for targeting 145 children

www.bleepingcomputer.com · a month ago

A Canadian man was sentenced to 33 years in prison after pleading guilty to targeting more than 145 children across the United States, some as young as 6 years old, in an eight-year-long sextortion scheme.
Online Scams Have Evolved in the A.I. Era. Here’s What to Do.

www.nytimes.com · a month ago

A criminal could be masquerading as a celebrity, web store or family member asking for your money. Detecting scams requires a new approach.
BTMOB RAT Spreads Across Brazil, LatAm via MaaS Model

www.darkreading.com · a month ago

An advanced remote access Trojan is propagating online. Notably, it's delivered via an operator licensing model and features a no-code malware-development interface.
ClearFake Abuses BSC Testnet Contracts for Resilient C2 Operations

gbhackers.com · a month ago

Threat actors behind the ClearFake campaign have adopted a novel and highly resilient command-and-control (C2) architecture by leveraging BNB Smart Chain (BSC) testnet smart contracts, creating an infrastructure that is effectively immune to traditional takedown efforts. Unlike conventional malware campaigns that depend on easily disruptable infrastructure such as hosting providers or registrars, this approach embeds
What the industrialization of exploitation means for defenders

www.csoonline.com · a month ago

For decades, cybersecurity was a battle of skill. Elite attackers versus elite defenders. The rules of engagement were understood, even if the playing field wasn’t level. If you hired better analysts and bought better tools, hopefully you hardened your systems well enough and built detection capabilities that wore out the adversary’s patience. That era is over, and most security programs haven’t fully processed what replaced it. Adversarial AI has industrialized exploitation. What once required a coordinated team of technically sophisticated threat actors to manage reconnaissance, weaponization, lateral movement and persistence can now be executed autonomously, at machine speed, against thousands of environments simultaneously. Threat actors no longer need deep technical expertise. They need compute, capital and access to AI tooling, all of which are commoditized. Think about what your team used to rely on. Attackers left clues that telegraphed their presence, patterns you could learn, signatures you could catch and their campaigns moved slowly enough to track. That’s gone. Reconnaissance that took days now takes minutes. The attacks your tools were trained to recognize are being rewritten on the fly. And the coordinated human teams that once limited how many targets an adversary could hit at once? They can now be easily outmaneuvered by a single actor with the right AI tooling. Your architecture was designed for a threat that no longer exists. The problem is structural The gaps AI-enabled adversaries are exploiting aren’t primarily operational failures. They’re architectural ones. As enterprise environments expanded across cloud, OT, identity infrastructure and third-party integrations, security organizations responded by layering tools. Each new surface area got a new control, a new scanner, a new dashboard. This has created a security architecture that’s simultaneously complex and fragmented, generating enormous volumes of signal while producing limited clarity about where the actual risk lives. The specific failure modes are familiar to anyone who has worked through a real breach investigation. Controls that don’t share context mean a vulnerability scanner can flag a misconfiguration, an identity tool can flag an overprivileged account and an endpoint platform can generate an alert, none of them are able to answer the question an attacker has already answered: Can these exposures be chained into a viable path to something critical? Visibility across hybrid and multi-cloud environments remains patchwork at best; attackers move freely across boundaries that defenders frequently can’t see across. Identity exposure, overprivileged service accounts, stale credentials, misconfigured trust relationships, creates lateral movement pathways that go undetected until someone is already deep inside the environment. Alert overload causes security teams to spend disproportionate time on findings with no realistic exploitation path. None of this surprises working security professionals. What’s less widely acknowledged is that it’s not a resourcing problem. More analysts and more siloed tools, layered onto a fragmented architecture, produce more of the same. Security tools are built to detect and flag. They weren’t built to show you what an attacker sees when looking at your environment. Attackers have already leveraged automation to extend their reach. AI will enable them to exploit attack paths with unprecedented speed. So, as clichéd as it sounds, defenders need to put themselves in the shoes of attackers and adjust their approach from there. How defenders can change the equation That mindset shift starts with asking different questions. Most security programs are built around “what vulnerabilities exist?” The better question is “what can an attacker actually do with what’s in my environment right now?” That reframing has real consequences for how programs are run. Incident response speed matters, but it’s a downstream variable. The upstream question is how to make incidents caused by structural gaps and flaws less likely, which requires understanding your environment the way an attacker would, as a network of relationships that can be chained, not as a collection of independent assets and controls. Most security teams have never mapped their environment from that vantage point. Most attackers have. It also means prioritizing remediation by real exploitability rather than CVSS score or asset criticality in isolation. This is Exposure Management 101, the “EM” in Gartner’s Continuous Threat Exposure Management framework, which provides a structure for replacing broken vulnerability management processes. Exposure Management operationalizes the “think like an attacker” ethos at scale. Security programs that prioritize real exploitability are working on the right problem. The 2025 Verizon DBIR found that the median time for edge device vulnerabilities to be mass-exploited was zero days, while organizations took a median of 32 days to fully remediate them. And separately, the average time to patch across 17 high-profile edge device CVEs was 209 days. You can’t close that gap by triaging everything equally. The defender’s actual advantage: Know thy environment There’s a version of the current threat landscape that leads to fatalism. Why invest in a fight you’re structurally losing? It’s easy to go there, but it’s the wrong read. Ultimately, I believe that defense will become equally automated, a true battle of the machines. But even before we get there, defenders have a structural advantage that no amount of adversarial AI eliminates: They operate inside the environment they’re protecting. They can see the full topology, the identity relationships, the compensating controls, the critical assets. An attacker, however sophisticated the tooling, has to discover all of that from the outside. Defenders already know it. At least they should. Most organizations have the underlying data to understand their own exposures. The challenge is synthesizing it into something actionable, seeing on a continuous basis what an attacker would see, and which paths actually lead somewhere dangerous. Start with visibility that actually crosses the boundaries your tool stack has carved out over years of reactive purchasing. Get serious about prioritization based on what’s genuinely exploitable in your environment, not what scores highest on a spreadsheet. And stop conflating compliance-driven tests with your current risk posture, they tell you what things looked like last quarter, not today. The conversations CISOs should be having at the board level should focus on whether the program running today can flag when an AI-empowered attacker has a clear path to the company’s crown jewels. The industrialization of exploitation is a genuine shift in the adversary’s economics and logistics. But the structure of the problem hasn’t changed. Defenders who understand their own environment better than attackers, and who build their programs around that advantage, are in a stronger position than the threat headlines suggest. Are you leveraging the defender’s advantage? The fast way to know this is to have your team answer the following questions: How many critical corporate assets have a validated attack path from an internet-facing entry point? How has that number changed quarter-over-quarter? What percentage of our remediation effort closed an actual path versus a theoretical finding? Do we know the ways an attacker could create an attack path to our critical assets? Are we continuously assessing all of the possible attack paths to our critical assets?” Then, if you don’t like the answers, it’s time to revisit your control architecture. The best way to avoid cyber disruption from adversarial AI is to fix the structural problems so those attack paths aren’t realized in the first place. Carpe Diem! This article is published as part of the Foundry Expert Contributor Network. Want to join?
Roundcube Webmail Vulnerability Allows Hackers to Execute Malicious SQL Queries

gbhackers.com · a month ago

Roundcube Webmail users are being urged to update their systems immediately after the disclosure of multiple security vulnerabilities, including a critical pre-authentication SQL injection flaw that allows attackers to execute malicious database queries without requiring login access. The vulnerabilities were patched in newly released versions 1.6.16 and 1.7.1, published on May 24, 2026, as part
JINX-0164 Targets Cryptocurrency Firms with Fake Recruiter Lures and macOS Malware

thehackernews.com · a month ago

A new campaign orchestrated by a previously undocumented threat actor has targeted cryptocurrency organizations with an aim to facilitate digital asset theft using recruitment-themed social engineering and bespoke macOS malware. "These campaigns leveraged sophisticated social engineering techniques, custom macOS malware, and deep targeting of CI/CD infrastructure," Wiz researchers Shira Ayal
Hackers Spread VIP Keylogger via Fake Business Emails

gbhackers.com · a month ago

Hackers are actively deploying VIP Keylogger through phishing emails disguised as routine business documents, using multi‑layered loaders, steganography, and in‑memory execution to quietly steal credentials and other sensitive data from compromised systems. Recent VIP Keylogger campaigns rely heavily on social engineering, with phishing emails crafted to look like legitimate bank payment notifications, procurement orders, logistics
Motorola App Allegedly Hijacks Amazon App Activity to Insert Affiliate Referral Codes

gbhackers.com · a month ago

Motorola is facing scrutiny after researchers and users discovered that its preinstalled Smart Feed app was silently hijacking launches of the Amazon Shopping app to inject affiliate referral codes into user traffic. The behavior, now disabled after public backlash, raises fresh concerns about trust, bloatware, and on‑device ad tech on premium Android phones. Motorola Smart
Microsoft Warns Against Public Release of Zero-Day Details Before Vendor Coordination

gbhackers.com · a month ago

Microsoft has issued a strong warning to the cybersecurity community following a recent surge in publicly disclosed zero-day vulnerabilities without prior coordination. According to the Microsoft Security Response Center (MSRC), several vulnerabilities were disclosed without prior notification to Microsoft, leaving customers exposed to potential exploitation before patches could be developed and deployed. The company stressed
What scanners are actually trying against AI infrastructure

honeylabs.net · a month ago

Scanners are intensely targeting AI infrastructure, specifically probing Anthropic proxy paths to find misconfigured services without sending proper authentication tokens. Port 11434 running Ollama is a notable high-volume target, receiving a steady stream of sources weekly that utilize unauthenticated endpoints. Vulnerabilities include the /api/tags endpoint, which publicly lists available models, and the /api/pull path, which can potentially allow calling servers to download arbitrary models. These findings are compounded by focused sweeps that test credential storage conventions for major AI platforms, including Gemini and Claude.
Nordic CISOs Handle Rising Cyber Threats Remarkably Well

www.darkreading.com · a month ago

Artificial intelligence notwithstanding, the vast majority of CISOs in northern Europe say they're facing no more serious cyberattacks than they did two years ago.
Hackers Host JS Malware on GHOSTYNETWORKS and OMEGATECH

gbhackers.com · a month ago

Hackers are abusing two bulletproof hosting providers, GHOSTYNETWORKS and OMEGATECH, to run a global JavaScript (JS) malware infrastructure that powers large‑scale malspam and business email compromise activity. In March 2026, multiple malspam waves delivered a JavaScript backdoor via ZIP or RAR attachments to organizations across regions and sectors, including energy companies and finance ministries. The
Threat Actors Launch FIFA Website Spoofing Campaign to Steal User Details

gbhackers.com · a month ago

Threat actors are actively launching spoofing campaigns targeting FIFA-themed websites ahead of the 2026 FIFA World Cup, according to a Public Service Announcement (Alert I-052726-PSA) issued by the Federal Bureau of Investigation (FBI) on May 27, 2026. The campaign is designed to exploit global interest in the tournament by deceiving users into interacting with fraudulent
New PureLogs Variant Abuses MSBuild to Evade Detection

gbhackers.com · a month ago

A new phishing-driven malware campaign distributing a stealthy PureLogs variant that leverages advanced evasion techniques, including process hollowing via MsBuild.exe. The campaign is designed to steal sensitive data from infected systems while avoiding traditional detection mechanisms through layered obfuscation and fileless execution. The attack begins with phishing emails disguised as purchase orders, a familiar social
FortiClient Code Execution Flaw Exploited to Deploy EKZ Malware

gbhackers.com · a month ago

Fortinet customers are facing a new wave of attacks after a critical flaw in FortiClient Endpoint Management Server (EMS) was exploited to push a fake Fortinet patch that secretly installs credential‑stealing malware. The vulnerability, tracked as CVE‑2026‑35616, allows unauthenticated attackers to bypass FortiClient EMS API authentication and issue privileged requests, effectively turning the management server
Silent Ransom Impersonates IT Support to Target Law Firms

gbhackers.com · a month ago

The Silent Ransom Group (SRG) is running a new wave of hands‑on social engineering attacks against law firms, posing as internal IT support to steal sensitive data and extort victims without deploying traditional ransomware. In its latest campaigns, SRG contacts employees directly by phone or lures them through phishing emails that appear to come from
SBI Warns Fake YONO Deactivation Message Scam

gbhackers.com · a month ago

State Bank of India has issued a cybersecurity alert about an ongoing phishing campaign targeting users of its YONO digital banking platform. Fraudulent messages claim a customer's YONO app will be deactivated due to incomplete Aadhaar updates and urge recipients to click links or install APKs that can harvest login credentials, intercept OTPs, and grant remote access for financial theft. The bank warns it never asks customers to update sensitive information via unsolicited links, advises downloading YONO only from official app stores, and recommends verifying communications through official channels, reporting suspicious messages, and keeping devices patched and protected.
Defense by accumulation

puck.security · a month ago

There is a 64 year arc showing that credentials persist as files and other artifacts and remain a primary target whenever they are accessible. Credentials have migrated from on disk password files to in memory artifacts, to tokens and session cookies, and now to machine to machine agent credentials, with incidents such as the Morris Worm, Mimikatz driven attacks, the Target breach, the RSA SecurID incident, the Office of Personnel Management compromise, the Snowflake campaign, CI compromises like Codecov and CircleCI, and support channel incidents at identity providers illustrating each stage. Operational practices drive the risk: long lived and over privileged tokens, secrets committed to repositories, exposed CI environment variables, unlocked password stores, and lack of rotation or scope limitations mean attackers choose the softest layer rather than breaking the strongest cryptography. The practical defense imperative is visibility across all credential classes so that in the first hour of an incident responders can answer what credentials are on a host, what those credentials reach, and where similar patterns exist.
Employees are unknowingly inviting tech support impersonators into firms, says FBI

www.csoonline.com · a month ago

The FBI warns that a criminal group known as the Silent Ransom Group, also tracked as Luna Moth Chatty Spider and UNC3753, has targeted US law firms since at least 2022 using data theft and extortion rather than encryption. The group now impersonates IT support by phone to obtain remote access or visits in person to insert USB storage devices into employee computers to install remote access tools or steal data. Observed tools and behaviors include use of WinSCP or renamed Rclone to transfer files, uploading stolen data to Google Drive or Microsoft OneDrive, and unauthorized installation of remote support software such as Zoho Assist, AnyDesk, RustDesk, Quick Assist, Syncro, Splashtop, or Atera. The FBI urges organizations to verify IT requests through approved channels, train employees to refuse unverified visitors and unsolicited support calls, disable or limit USB use, collect visitor identification, monitor for unexpected remote access tool installations and data transfers, and preserve extortion notes, logs, and surveillance for investigators.
CVE-2026-0300 PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal (Severity: CRITICAL)

security.paloaltonetworks.com · a month ago

A buffer overflow vulnerability, identified as CVE-2026-0300, has been discovered in the User-ID Authentication Portal service of Palo Alto Networks PAN-OS software. This vulnerability allows an unauthenticated attacker to potentially execute code with root privileges on affected PA-Series and VM-Series firewalls. To mitigate the risk, it is recommended to restrict User-ID Authentication Portal access to trusted internal IP addresses or disable the service entirely. Several PAN-OS versions are impacted, with updates expected between May 13th and May 28th of 2026.
Another IT governance headache: AI-enabled sanction evasion

www.csoonline.com · a month ago

A new research report warns that over the next three to five years governments and the private sector must rapidly adapt identification and mitigation protocols as adversaries shift from AI assisted to AI enabled sanctions evasion and proliferation financing. AI can mass produce high quality fraudulent documents, automate the administrative minutia of managing extensive shell company networks, create sophisticated fake identities, and analyze blockchain patterns in real time to dynamically adjust cryptocurrency mixing strategies to evade detection. Actors including North Korea and Iran are already developing and deploying AI models to support phishing and other schemes that raise revenue for weapons programs. Enterprises are advised to adopt defensive AI, behavior based analytics, circuit breakers for heavy API or marketplace use, stronger identity verification and updated personnel training, and to treat the problem as a trust architecture challenge rather than a narrow sanctions screening issue to prepare for an anticipated AI arms race.
Smashing Security podcast #469: What your Oura ring won’t tell you

grahamcluley.com · a month ago

A contractor for the US Cybersecurity and Infrastructure Security Agency published dozens of plain text credentials to a public GitHub profile. The Oura ring was found to transmit some user data unencrypted, and the company’s reply to a journalist asking how often it shares user data with law enforcement was telling. Episode 469 of the Smashing Security podcast features an interview with OPSWAT’s Benny Czarny about his book Cybersecurity Upside Down, hosted by Graham Cluley with guest Lesley Carhart.
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

sec.cloudapps.cisco.com · a month ago

In May 2026 a vulnerability in the peering authentication of Cisco Catalyst SD-WAN Controller and Cisco Catalyst SD-WAN Manager could allow an unauthenticated remote attacker to bypass authentication and obtain administrative privileges on affected systems. Exploitation can let an attacker log in as an internal high privileged non-root user, access NETCONF, and manipulate SD-WAN network configuration; there are no workarounds and the issue is rated Critical. Software updates have been released to address the issue, customers are advised to collect admin-tech output from each control component before upgrading to preserve indicators of compromise, and the vulnerability is tracked as CVE-2026-20182.
Out of the Crypt: The Evolving Cyber Extortion Economy

unit42.paloaltonetworks.com · a month ago

There is a growing shift in the cyber extortion economy from encryption-based ransomware to data-theft extortion, with encryption used in seventy eight percent of extortion cases in 2025 compared with near or above ninety percent in earlier years. Threat actors are weaponizing regulatory disclosure windows and high breach costs to force payments, driving average data-theft extortion losses to about five point zero eight million dollars and exceeding ten million dollars for broader U.S. breaches. Actors such as TGR-CRI-1135 are exploiting software supply chain compromises, Bling Libra is using vishing to infiltrate SaaS tenants, and CL-CRI-1116 has combined swatting with data leaks under a rebranded program called Redact. Frontier AI models are accelerating attack timelines and are expected to be weaponized within an estimated three to five months, prompting recommendations to deploy data loss prevention, strengthen SaaS security posture, adopt phishing resistant authentication like FIDO2 hardware keys, and secure CI slash CD pipelines and secrets.
AI models more vulnerable than claimed when faced with iterative attacks

www.csoonline.com · a month ago

A Cisco study tested 15 frontier AI models with 30,090 single-prompt attacks and 6,986 multi-turn attacks and found multi-turn attack success rates were substantially higher than single-turn rates across most models. Examples include Anthropic Claude Opus 4.6 rising from 3.64 percent single-turn ASR to 16.20 percent multi-turn, OpenAI GPT 5.4 from 2.74 percent to 24.68 percent, and Google Gemini 3 Pro from 18.10 percent to 73.35 percent. Model configuration flags such as reasoning modes materially changed safety outcomes, for example xAI Grok 4.1 Fast non-reasoning at 88.30 percent versus reasoning at 43.47 percent, and the study calls for paired single-turn and multi-turn ASRs, transparent configuration effects, and adversarial benchmarks informed by OWASP and emerging regulation. The researchers recommend any model with an absolute gap greater than 15 percentage points between single-turn and multi-turn ASR receive a manual review before deployment, which flagged eight models in the tested cohort.
GPU mining malware spreads via SEO poisoning, AI chatbots

www.bleepingcomputer.com · a month ago

Threat actors are targeting high performance systems in a coordinated cryptojacking campaign that spreads via SEO poisoning and by manipulating AI chatbot recommendations. The infection starts with malicious download pages for common utility software such as CrystalDiskInfo, HWMonitor, Display Driver Uninstaller, FurMark, K-Lite Codec Pack, and PDFgear where ZIP archives bundle a legitimate executable with a malicious DLL that installs the ScreenConnect remote access tool via a vcredistx64.dll installer to gain persistence. Attackers use a loader named SimpleRunPE to establish multiple autostart persistence mechanisms, perform process hollowing into Microsoft signed utilities, add exclusions in Microsoft Defender, evade virtual machines and analysis tools, and then deploy GPU miners gminer, lolMiner, or SRBMiner-MULTI to maximize GPU mining yield on each compromised device.
Go Ask Alice Why Tech Start-Ups Are Spending Big on Hype Videos

www.nytimes.com · a month ago

Bay Area A.I. startups are increasingly staging theatrical, highly produced marketing videos featuring costumed characters like a Mad Hatter and a giant rabbit to capture attention. Founders and marketing teams are using these stunts to generate viral content, signal brand identity, and compete for limited investor and user attention in a crowded market. The trend reflects a shift toward spectacle-driven launch strategies where visibility often trumps product maturity.
Report ‘phone hack’ to police or I will do it for you, Labour chair tells Farage

www.theguardian.com · a month ago

The Labour chair gave Nigel Farage 24 hours to confirm to the police or national security services whether his phone, email and bank accounts were hacked by Russia linked actors or the Labour party said it would report the claim itself in the public and national interest. Farage has said foreign state actors likely serving Moscow accessed his phone and leaked information about an undeclared five million pounds gift from Christopher Harborne, and Reform said the incident had been reported to the relevant authorities without specifying which ones. He reportedly handed his phone for forensic analysis that allegedly found a malware attack likely originating from Russia, while cybersecurity experts have called the claim unsubstantiated and the parliamentary commissioner for standards has opened an investigation into whether the gift should have been declared.
Ransomware Actors Show Up In Person to Steal Law Firm Data

www.darkreading.com · a month ago

The FBI warns that the extortion group Silent Ransom Group is targeting law firms by impersonating IT staff and social engineering employees, and in some cases actors have appeared in person at firm locations. Attackers establish access via phishing calls and links to remote access tools or by inserting storage devices, then exfiltrate data using tools such as WinSCP or renamed versions of Rclone to cloud storage or physical drives and use data theft extortion rather than encrypting systems. Indicators include unauthorized installations of remote access or management tools, unexpected USB or external drive connections, and WinSCP or Rclone sessions to external IPs, and the FBI recommends verifying identities of on site visitors, enforcing phishing resistant multifactor authentication, training staff to report phishing, and disabling remote access and external drive installation on systems holding sensitive data.
The Next AI Security Failure May Start With a Trusted Assistant

www.techrepublic.com · a month ago

There is a class of vulnerability in AI coding assistants where a network sandbox bypass combined with prompt injection can be used to exfiltrate data, and a widely used tool was quietly patched for a SOCKS5 hostname null byte weakness. There are systemic gaps because organizations often rely on model layer controls such as system prompts, output filters, and sandboxes that can be defeated, leaving no independent data layer enforcement to stop unauthorized access. There are recommended data layer controls including authenticating agents and tying requests to the human who authorized them, enforcing attribute based access policies, encrypting returned data, and writing interactions to a tamper evident audit log. There are industry findings that most custom assistants lack adequate protection, many organizations cannot enforce purpose limits or terminate misbehaving agents, and AI enabled adversary activity is rising sharply, underscoring the need to treat assistants as data processing systems with least privilege, encryption, and audit rigor.
UK Cyberspying Chief Calls AI ‘an Unstoppable Force’ and Warns About Russia

www.securityweek.com · a month ago

Artificial intelligence is an unstoppable force being weaponized in ways that fall just short of traditional warfare, and Britain faces a narrowing window to stay ahead as tech companies release AI innovations at rapid pace. The director of GCHQ warned that Russia is scaling up daily hybrid activity targeting critical infrastructure, democratic processes, supply chains and public trust, and cited new intelligence suggesting almost half a million Russian soldiers have been killed since February 2022. GCHQ is planning to harden machine speed cyber defenses by integrating agentic AI, and officials urged governments, companies and citizens to treat cybersecurity with far greater urgency while reinforcing international partnerships, particularly the U.K.-U.S. intelligence relationship.