A North Korean hacking campaign is targeting financial technology and cryptocurrency firms with attacks which combine social engineering, deepfakes and MacOS malware. The attacks have been detailed by Google Cloud’s Mandiant Threat Intelligence, which has attributed the campaign to UNC1069,… Read More "North Korean Hackers Use Deepfake Video Calls to Target Crypto Firms"
The time between vulnerability disclosure and exploitation has plunged 94% over the past five years as threat actors weaponize so-called “n-days,” according to a new Flashpoint study. The threat intelligence vendor claimed that “time to exploit” (TTE) dropped from 745 days… Read More "Time to Exploit Plummets as N-Day Flaws Dominate"
The so-called “AI skills” used to scale and execute AI operations are dangerously exposed to data theft, sabotage and disruption, TrendAI has warned. The newly named business unit of Trend Micro explained in a report published this week that AI… Read More "AI Skills Represent Dangerous New Attack Surface, Says TrendAI"
Separating truth from fiction is the first step towards making better parenting decisions. Let’s puncture some of the most common misconceptions about online harassment. 21 Aug 2025 • , 5 min. read Cyberbullying, unfortunately, is on the rise. Data from… Read More "‘What happens online stays online’ and other cyberbullying myths, debunked"
World Leaks, the cyber-criminal data extortion group which has targeted some of the world’s biggest companies, has added a novel, never-before-seen malware to their arsenal, research by Accenture Cybersecurity has revealed. Accenture has named the malware ‘RustyRocket’. It allows World… Read More "World Leaks Ransomware Adds Custom Malware ‘RustyRocket’ to Attacks"
The discovery of PromptLock shows how malicious use of AI models could supercharge ransomware and other threats 26 Aug 2025 • , 2 min. read This supports our belief that PromptLock was a proof of concept rather than fully… Read More "First known AI-powered ransomware uncovered by ESET Research"
Over 260,000 Google Chrome users have downloaded fake AI assistants designed to deliver malicious browser extensions which can steal login credentials, monitor emails and enable remote access by attackers. Over 30 Google Chrome extensions designed to deliver the phoney AI… Read More "Fake AI Assistants in Google Chrome Web Store Steal Passwords"
Cyberbullying is a fact of life in our digital-centric society, but there are ways to push back 27 Aug 2025 • , 4 min. read For better or worse, the digital world in many ways resembles its physical counterpart. Unfortunately,… Read More "Don’t let “back to school” become “back to bullying”"
Security experts have claimed that the blast radius of third-party data breach incidents is far larger than at first thought, with more than 433 million individuals impacted by 136 events last year. Black Kite compiled its seventh annual Third-Party Breach… Read More "Huge “Shadow Layer” of Organizations Hit by Supply Chain Attacks"
From Meta shutting down millions of WhatsApp accounts linked to scam centers all the way to attacks at water facilities in Europe, August 2025 saw no shortage of impactful cybersecurity news 28 Aug 2025 As August 2025 comes to a… Read More "This month in security with Tony Anscombe – August 2025 edition"
