Law enforcement agencies from Ukraine and Germany have raided the house of two suspected members of the Black Basta ransomware group, seizing evidence of their involvement in cybercriminal activities. The raid took place on January 15 in Lviv and Ivano-Frankivsk,… Read More "Suspects Linked to Black Basta Ransomware Group Raided in Ukraine"
Germany’s Federal Office for the Protection of the Constitution (aka Bundesamt für Verfassungsschutz or BfV) and Federal Office for Information Security (BSI) have issued a joint advisory warning of a malicious cyber campaign undertaken by a likely state-sponsored threat actor… Read More "German Agencies Warn of Signal Phishing Targeting Politicians, Military, Journalists"
A set of malicious Google Chrome Extensions which steal cookies, takeover accounts and actively block incident response have been identified targeting widely used human resource (HR) and enterprise resource planning (ERP) platforms, including Workday, Netsuite and SAP SuccessFactors. Identified by… Read More "Malicious Google Chrome Extensions Hijack Workday and Netsuite"
An analysis by WIRED this week found that ICE and CBP’s face recognition app Mobile Fortify, which is being used to identify people across the United States, isn’t actually designed to verify who people are and was only approved for… Read More "Moltbook, the Social Network for AI Agents, Exposed Real Humans’ Data"
A new warning has been issued over continued disruptive cyber attacks against UK organisations, with local government bodies and operators of critical national infrastructure remaining key targets. Russian-aligned hacktivist groups are continuing to target UK and global organisations by attempting… Read More "Russian Hacktivists Intensify Disruptive Cyber Pressure on UK Orgs"
A newly identified malware strain built for covert, long-term access to compromised systems has been documented in recent security research. Dubbed PDFSIDER by Resecurity, the threat is delivered through Dynamic-Link Library (DLL) side-loading and is engineered to install an encrypted… Read More "Researchers Uncover PDFSIDER Malware – Infosecurity Magazine"
One of the world’s biggest marketplaces for fraudsters appears to be closing down its Telegram operations following sweeping sanctions imposed by the US and UK. London-based blockchain analytics company Elliptic revealed that Tudou Guarantee, which has become a staple of… Read More "Scam Marketplace Tudou Guarantee Shutters Telegram Ops"
AI is powering a “fifth wave” in the evolution of cybercrime, offering inexpensive, ready-made malicious tools enabling sophisticated attacks, according to Group-IB. In its latest report, published on January 20, the Singapore-based cybersecurity firm divided the history of cybercrime in… Read More "AI Supercharges Attacks in Cybercrime’s New ‘Fifth Wave’"
A phishing link delivered via private messages on LinkedIn is exploiting a legitimate, open-source penetration testing tool in what cybersecurity analysts say is a campaign designed to distribute a Remote Access Trojan (RAT) to victims. The campaign has been detailed… Read More "LinkedIn Phishing Campaign Exploits Open-Source Pen Testing Tool"
Alongside macroeconomic volatility and geopolitical conflict, cyber risk is one of the top threats worrying today’s CEOs as they grow less confident about the short-term growth outlook for their companies. This is according to PwC’s 29th Global CEO Survey which… Read More "Cyber Risks Among CEOs’ Top Worries Amid Weak Short Term Growth"
