Author: CyberMind

OpenAI has expanded its cyber-defense program Daybreak, arguing that artificial intelligence (AI) has flipped the hardest part of security from finding software flaws to fixing them. In an announcement on June 22, the company said the expansion centered on patch… Read More "OpenAI Expands Daybreak to Help Defenders Patch Flaws"

A malicious npm package has been caught impersonating one of the JavaScript ecosystem’s most widely used build tools. The lookalike package hid a multi-stage Windows remote access trojan (RAT) in a supply chain attack on developer machines. New analysis from… Read More "Lookalike npm Package Hides a Multi-Stage Windows RAT"

British lawmakers have warned that the UK’s national galleries and museums face a dangerous future after being let down by the government on cybersecurity. Parliament’s Public Accounts Committee (PAC) said in a report published on June 24 that the Department… Read More "UK Museums Face Cybersecurity Risks, MPs Warn"

AI is making cyber-attacks cheaper, faster to scale, easier to customize and harder to spot, but it’s not fundamentally changing the tradecraft of intrusions, a new ReliaQuest report has revealed. The threat intelligence specialist has been tracking the progress of the… Read More "AI Is Making Attacks Cheaper, Faster and More Covert, Says ReliaQuest"

The line between ransomware activity and nation-state backed cyber campaigns is blurring, as state-sponsored cyber espionage groups adopt tools and techniques associated with cyber criminals to disguise their intelligence operations, a report has warned. Analysis by cybersecurity researchers at NCC… Read More "Iran-Linked MuddyWater Poses as Ransomware Gang to Mask Espionage"

Japanese telecommunications operator KDDI has confirmed it suffered a breach that has affected five other internet services providers (ISPs) and potentially exposed 14.2 customer email accounts. In a public statement released on June 23, KDDI Corporation said an unauthorized actor… Read More "KDDI Breach Affects Six Japanese ISPs, Exposes 14.2 Email Credentials"

A North Korea-linked macOS backdoor has been caught hiding a prompt injection that targets malware analyst’s AI tools, rather than the sandbox analyzing it. SentinelLabs, the research arm of SentinelOne, said the Rust implant embedded 38 fabricated system messages designed to… Read More "macOS Backdoor Uses Prompt Injection to Evade AI Triage"

The infrastructure of two infamous information stealer malware strains (infostealers), StealC and Amadey, has been disrupted by an international law enforcement takedown. The action against formed the latest part of Operation Endgame, an ongoing global police investigation to combat ransomware… Read More "Operation Endgame Takes Down StealC and Amadey Infostealers"

A range of AI-powered web browsers have been tricked into abandoning their safety guardrails and leaking user data after being convinced they were playing a game. Researchers at LayerX demonstrated the technique, which they named BioShocking, against six agentic browsers… Read More "Researchers Trick AI Browsers Into Leaking Credentials"

There number of ransomware attacks against organizations across Europe has significantly increased during the past year, a new report has warned. This according to analysis of publicly disclosed ransomware incidents by researchers at cyber risk management provider Black Kite. They… Read More "Major Increase in Ransomware Attacks Targeting Europe, Warns Report"