The rising use of generative AI tools like Large Language Models (LLMs) in the workplace is increasing the risk of cyber-security violations as organizations struggle to keep tabs on how employees are using them. One of the key challenges IT… Read More "Personal LLM Accounts Drive Shadow AI Data Leak Risks"
Cybersecurity researchers have discovered a fresh set of malicious packages across npm and the Python Package Index (PyPI) repository linked to a fake recruitment-themed campaign orchestrated by the North Korea-linked Lazarus Group. The coordinated campaign has been codenamed graphalgo in… Read More "Lazarus Campaign Plants Malicious Packages in npm and PyPI Ecosystems"
“Microsoft reviews the manifest, signs it, and lists the add-in in their store. But the actual content – the UI, the logic, everything the user interacts with – is fetched live from the developer’s server every time the add-in opens,”… Read More "‘Dead’ Outlook add-in hijacked to phish 4,000 Microsoft Office Store users"
Chinese cyber threat actors intensified effort to gain access to Taiwan’s critical infrastructure organizations in 2025, with a particular emphasis on the energy sector, emergency rescue entities and hospitals. In a new report published on January 4, the National Security… Read More "China intensifies Cyber-Attacks on Taiwan"
Ravie LakshmananFeb 12, 2026Cyber Espionage / Artificial Intelligence Google on Thursday said it observed the North Korea-linked threat actor known as UNC2970 using its generative artificial intelligence (AI) model Gemini to conduct reconnaissance on its targets, as various hacking groups… Read More "Google Reports State-Backed Hackers Using Gemini AI for Recon and Attack Support"
Die neue CYROS-App verknüpft Sicherheitswarnungen von Behörden und Fachquellen, um über Cybersicherheitsvorfälle zu informieren. Rawat Yapathanasap – shutterstock.com Ransomware-Attacken, Phishing und digitale Sabotage: Vor dem Hintergrund der zunehmenden Cyberbedrohungslage hat das Frankfurter Cyberintelligence Institute (CII) ein digitales Warnsystem namens Cyber… Read More "Neue Warn-App für Cybervorfälle gestartet"
A new wave of Android malware has been enabling cybercriminals to carry out unauthorized tap-to-pay transactions without physical access to victims’ bank cards. The activity, documented in an advisory published today by Group-IB researchers, involves NFC-enabled applications sold and promoted within… Read More "Ghost Tap Malware Fuels Surge in Remote NFC Payment Fraud"
A malicious Windows packer known as pkr_mtsi has been identified as a flexible malware loader used in large-scale malvertising and SEO-poisoning campaigns, according to new research. First observed in the wild by ReversingLabs (RL) on April 24 2025, the tool has… Read More "Versatile Malware Loader pkr_mtsi Delivers Diverse Payloads"
Security experts have warned of a critical new vulnerability in popular AI workflow automation platform n8n that could enable adversaries to take over locally deployed instances and compromise enterprise secrets. Cyera revealed the “Ni8mare” vulnerability (CVE-2026-21858) in a blog post… Read More "Maximum Severity “Ni8mare” Bug Lets Hackers Hijack n8n Servers"
I had barely had time to skim these detailed descriptions—this was not how I’d planned to spend a Saturday evening with my wife—when my phone rang, just after midnight. I picked up the Signal call. A polite Indian-accented voice said,… Read More "He Leaked the Secrets of a Southeast Asian Scam Compound. Then He Had to Get Out Alive"
