The proliferation of AI has rapidly introduced many new software technologies, each with its own potential misconfigurations that can compromise information security. Thus the mission of UpGuard Research: discover the vectors particular to a new technology and measure its cyber… Read More "Analyzing llama.cpp Servers for Prompt Leaks"
May 30, 2025Ravie LakshmananVulnerability / Data Breach ConnectWise, the developer of remote access and support software ScreenConnect, has disclosed that it was the victim of a cyber attack that it said was likely perpetrated by a nation-state threat actor. “ConnectWise… Read More "ConnectWise Hit by Cyberattack; Nation-State Actor Suspected in Targeted Breach"
Die EU macht chinesische Hacker für eine bösartige Cyberkampagne gegen das Außenministerium in Tschechien verantwortlich. Andrii Yalanskyi – shutterstock.com Ein mutmaßlicher chinesischer Hackerangriff gegen das Außenministerium in Tschechien alarmiert die Nato und die EU. In einer gemeinsamen Erklärung der 32… Read More "Hackerangriff auf Außenministerium alarmiert Nato und EU"
On April 4, 2025, The Australian Financial Review reported on a set of credential abuse attacks targeting multiple Australian superannuation funds. These attacks were not breaches of the infrastructure of those companies, but compromises of individual customer accounts via stolen… Read More "Threat Monitoring for Superannuation Security"
Meta on Thursday revealed that it disrupted three covert influence operations originating from Iran, China, and Romania during the first quarter of 2025. “We detected and removed these campaigns before they were able to build authentic audiences on our apps,”… Read More "Meta Disrupts Influence Ops Targeting Romania, Azerbaijan, and Taiwan with Fake Personas"
Recall allows users to take snapshots of actions they take on their machines. To use Recall, users’ machine require a turbocharged neural processing unit (NPU) capable of performing more than 40 trillion operations per second (TOPS). Windows 11 machines shipping… Read More "Securing Windows 11 and Server 2025: What CISOs should know about the latest updates"
%20(1).png?w=1140&resize=1140,855&ssl=1 "AI Just Rewrote the Rules of BEC: Are Your Defenses Ready?")
Today, the average phishing email that lands in your CEO’s inbox is flawless. It uses perfect grammar, contains an intimate understanding of your organization’s current business landscape, and ends with an urgent, contextually relevant request. This isn’t the work of… Read More "AI Just Rewrote the Rules of BEC: Are Your Defenses Ready?"
CISOs need to remind employees in regular security awareness training sessions to not let their guard down, and to read every email closely for clues of a scam. They also need to be reminded that a caution popping up that… Read More "Warning: Threat actors now abusing Google Apps Script in phishing attacks"
The attack campaign discovered by ReversingLabs involved three packages: aliyun-ai-labs-snippets-sdk, ai-labs-snippets-sdk, and aliyun-ai-labs-sdk. Together the three packages were downloaded 1,600 times, which is significant considering they were online for less than a day before they were discovered and taken down.… Read More "Poisoned models in fake Alibaba SDKs show challenges of securing AI supply chains"
Hackers have gained unauthorized, persistent access to about 9000 ASUS routers in an ongoing exploitation campaign, according to cyber intelligence firm GreyNoise. Unlike typical malware attacks, the attackers maintain long-term access without dropping malware or leaving traces. Instead, the operation… Read More "Thousands of ASUS Routers Hijacked in Stealthy Backdoor Campaign"
