5+ day, 11+ hour ago   (665+ words) Artificial intelligence is no longer just a defensive tool; it has also become a powerful weapon in the hands of cybercriminals. As AI-driven attacks accelerate, the question is whether the situation is already spiralling out of control. John Hultquist, Chief…...

6+ day, 11+ hour ago   (399+ words) Citizen Lab has confirmed that one of the attacks exploited an iMessage vulnerability that could infect an iPhone without its owner having to click on a link. The investigation, conducted jointly with Serbian organisation SHARE Foundation, involved analysing the individual's…...

1+ week, 11+ hour ago   (454+ words) Fire Ant is a new operation targeting routers made by the US company, which are widely used by governments and large corporations, continuing a trend also seen with Volt Typhoon and Salt Typhoon. "When an attacker controls the routers, they…...

1+ week, 2+ day ago   (329+ words) The cloud storage provider detected unauthorised access between 4 and 21 August. Files were viewed or downloaded in fewer than one-third of the affected accounts. A flaw in Lenovo ID's email verification system enabled unauthorised access to around 5,000 Dropbox accounts between 4 and…...

1+ week, 5+ day ago   (354+ words) The vendor released urgent patches for two critical vulnerabilities and advised disconnecting servers from the internet to block active exploits. "The PaperCut Software security response team is investigating the active exploitation of a vulnerability affecting PaperCut NG and PaperCut MF....

2+ week, 6+ hour ago   (321+ words) The alleged database contains names, phone numbers and email addresses, but there is still no evidence confirming that the data was stolen in an attack on the Chinese company. A threat actor claims to have obtained a database with information…...

2+ week, 11+ hour ago   (292+ words) Operational failures uncover global network behind 5,000+ compromised devices and 2,000 websites This analysis reconstructs how a modern criminal infrastructure is organized from the inside, not from the victims' perspective. The campaign, which affected more than 5,000 infected computers worldwide, employed nearly 2,000 compromised…...

2+ week, 5+ day ago   (231+ words) Attackers used fake debt relief offers and follow-up phone calls to bypass security controls without using malicious links or files. Researchers from the cybersecurity company Check Point Software Technologies Ltd. have identified and blocked a sophisticated large-scale phishing email campaign…...

3+ week, 2+ day ago   (262+ words) Cybercrime hits the dashboard: A vulnerability in Android updates lets attackers secretly install malicious code, extract technical data, and execute ad fraud. A novel malicious software campaign targeting Android specifically for vehicle smart screens has been detected by the research…...

3+ week, 3+ day ago   (425+ words) Cybersecurity, moreover, acquires special relevance for the sector. The report highlights the growing impact of attacks on critical infrastructures and essential operators, in a context of accelerated digitalization. Economically motivated cyberattacks will continue to be predominant, especially through ransomware. The…...