A sophisticated China-nexus threat actor has successfully infiltrated multiple medical research networks across public and private sectors, specifically targeting artificial intelligence, cybersecurity, medical research, and national defense data. The campaign demonstrates advanced tradecraft includ
Anthropic has updated its privacy policy to include identity verification measures for Claude users, marking a significant shift in how AI companies handle user authentication and data collection. The new policy enables Anthropic to request and store government-issued identification documents, biome
Federal law enforcement agencies have successfully seized two prominent deepfake websites, CFAKE and SOCFAKE, which specialized in creating and distributing non-consensual explicit deepfake content targeting famous women. The coordinated takedown marks a significant enforcement action against AI-pow
Chinese state-sponsored threat actors successfully infiltrated medical and military networks, maintaining persistent access for over 12 months. The attackers conducted extensive surveillance operations, compromising Gmail accounts and exfiltrating sensitive data from healthcare institutions and defe
Threat actors are leveraging Microsoft Graph API reconnaissance techniques to identify and target payroll and HR employees within organizations, ultimately exfiltrating sensitive salary data. By abusing legitimate Graph API permissions and queries, attackers blend reconnaissance activities with norm
Danish pharmaceutical giant Novo Nordisk confirmed a cyberattack resulting in data theft, though the company maintains that sensitive patient information and drug formulations were not compromised. The breach targeted corporate systems and involved the exfiltration of business-related data. As the w
Security researchers have uncovered a critical attack vector that weaponizes Microsoft 365 Copilot’s AI capabilities to exfiltrate sensitive corporate data through a single user click. The attack leverages Copilot’s broad access permissions and natural language processing to automatically collect, p
Arch Linux has temporarily suspended new account registrations for its Arch User Repository (AUR) following a coordinated attack involving malicious package uploads. The incident forced administrators to lock down the community-driven repository after detecting numerous suspicious commits designed t
Organizations worldwide are inadvertently creating significant security vulnerabilities during employee onboarding by issuing temporary passwords that employees never change, sharing credentials insecurely, or implementing weak initial authentication requirements. This seemingly minor oversight has
A sophisticated malvertising campaign dubbed “SearchJack” has compromised 758,000 Chrome browser users by deploying 23 malicious extensions that hijack search queries and redirect traffic for profit. The extensions, which masqueraded as legitimate productivity and utility tools, intercepted user sea