The Five Eyes intelligence alliance has issued a fresh warning about renewed Chinese espionage operations targeting government officials, defense contractors, and critical infrastructure workers through LinkedIn. Threat actors are creating sophisticated fake profiles to establish trusted relationshi
Chinese state-sponsored threat actor TA4922 has broadened its phishing campaign beyond traditional targets, now hitting organizations in the United Kingdom, Germany, Italy, and South Africa. The group deploys sophisticated credential harvesting infrastructure using compromised legitimate domains and
European law enforcement agencies successfully dismantled a sophisticated online marketplace specializing in fraudulent identity documents used predominantly by migrant smuggling operations. The operation, coordinated across multiple jurisdictions, resulted in arrests, server seizures, and the disru
Cybercriminals are creating sophisticated fake websites that impersonate legitimate open-source projects, achieving high search engine rankings to distribute malware. These malicious sites leverage Traffic Distribution Systems (TDS) to selectively serve malware payloads based on victim profiling, wh
Cybercriminals are orchestrating a targeted phishing campaign against Chrome extension developers, sending fraudulent copyright infringement notices that impersonate the Chrome Web Store. These convincing emails trick developers into clicking malicious links that lead to credential-harvesting pages
The U.S. Department of Justice has taken decisive action against cryptocurrency fraud networks operating across Southeast Asia, successfully freezing $3.8 million in digital assets. These operations, often running from compounds in Cambodia, Laos, and Myanmar, have been targeting American victims th
Researchers have demonstrated that freely available open-source AI models can autonomously design and build self-propagating computer worms without requiring sophisticated tools like proprietary AI systems or zero-day exploits. This development marks a significant shift in the threat landscape, lowe
Organizations worldwide are inadvertently storing user passwords in plain text within Active Directory (AD) description fields, creating a critical security vulnerability. This widespread practice bypasses password hashing mechanisms and grants unauthorized access to anyone with basic AD read permis
Global web traffic has reached a historic tipping point: automated bots now generate more traffic than human users for the first time ever. Recent data reveals that bot traffic accounts for 52-55% of all internet activity, with malicious bots representing a significant portion of this automated traf
Commvault warns organizations that traditional backup strategies are failing against AI-enhanced attacks that leave systems in a “dark, dead” state. Modern threat actors leverage artificial intelligence to identify and destroy backup systems before deploying ransomware, rendering recovery impossible