Security News

Security News

Breaking Cyber Security and Threat Intel News fresh off the wire!

OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials

OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials

Microsoft starts testing cleaner Windows Search without ads

Microsoft starts testing cleaner Windows Search without ads

BleepingComputer

US sanctions VPN, malware providers for enabling ransomware attacks

US sanctions VPN, malware providers for enabling ransomware attacks

BleepingComputer

Grok Build Uploads Entire Git Repositories to xAI Storage, Not Just Files It Reads

Grok Build Uploads Entire Git Repositories to xAI Storage, Not Just Files It Reads

AuthNContext and AMR, We Remember What MFA You Provided Last Summer!

AuthNContext and AMR, We Remember What MFA You Provided Last Summer!

U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support

U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support

148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

Microsoft Maps Year-Long ShinyHunters-Linked Salesforce Data Theft Across Three Paths

Microsoft Maps Year-Long ShinyHunters-Linked Salesforce Data Theft Across Three Paths

Japan's largest taxi operator shuts systems after cyberattack

Japan's largest taxi operator shuts systems after cyberattack

BleepingComputer

Hackers backdoor Jscrambler npm package with infostealer malware

Hackers backdoor Jscrambler npm package with infostealer malware

BleepingComputer

New CrashStealer malware poses as Apple crash reporting tool

BleepingComputer

CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks

CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks

Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found

Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found

CISA warns of actively exploited RCE flaws in Joomla extensions

CISA warns of actively exploited RCE flaws in Joomla extensions

BleepingComputer

⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More

⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More

Lidl discloses online shop breach after service provider hack

Lidl discloses online shop breach after service provider hack

BleepingComputer

Breach at the Beach: Play the Ultimate Entra ID CTF

Breach at the Beach: Play the Ultimate Entra ID CTF

BleepingComputer

New MemGhost Attack Plants Persistent False Memories in AI Agents Through One Email

New MemGhost Attack Plants Persistent False Memories in AI Agents Through One Email

UK charges suspects linked to Russian Coms call spoofing platform

UK charges suspects linked to Russian Coms call spoofing platform

BleepingComputer

Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft

Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft

Meta Files Patent for AI That Can Listen All Day and Track How You're Feeling

Meta Files Patent for AI That Can Listen All Day and Track How You're Feeling

Thinking Fast and Slow in the SOC: The Case for Combining Autonomous AI with Analyst Copilots

Thinking Fast and Slow in the SOC: The Case for Combining Autonomous AI with Analyst Copilots

EU sanctions Russian GRU military hackers over cyberattacks

EU sanctions Russian GRU military hackers over cyberattacks

BleepingComputer

Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory

Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory

US and allies warn of Russian critical infrastructure attacks

US and allies warn of Russian critical infrastructure attacks

BleepingComputer