%20(1).png?w=1140&resize=1140,855&ssl=1 "AI Just Rewrote the Rules of BEC: Are Your Defenses Ready?")
Today, the average phishing email that lands in your CEO’s inbox is flawless. It uses perfect grammar, contains an intimate understanding of your organization’s current business landscape, and ends with an urgent, contextually relevant request. This isn’t the work of… Read More "AI Just Rewrote the Rules of BEC: Are Your Defenses Ready?"
CISOs need to remind employees in regular security awareness training sessions to not let their guard down, and to read every email closely for clues of a scam. They also need to be reminded that a caution popping up that… Read More "Warning: Threat actors now abusing Google Apps Script in phishing attacks"
The attack campaign discovered by ReversingLabs involved three packages: aliyun-ai-labs-snippets-sdk, ai-labs-snippets-sdk, and aliyun-ai-labs-sdk. Together the three packages were downloaded 1,600 times, which is significant considering they were online for less than a day before they were discovered and taken down.… Read More "Poisoned models in fake Alibaba SDKs show challenges of securing AI supply chains"
Hackers have gained unauthorized, persistent access to about 9000 ASUS routers in an ongoing exploitation campaign, according to cyber intelligence firm GreyNoise. Unlike typical malware attacks, the attackers maintain long-term access without dropping malware or leaving traces. Instead, the operation… Read More "Thousands of ASUS Routers Hijacked in Stealthy Backdoor Campaign"
A newly uncovered remote access Trojan (RAT) that operated for weeks on a compromised system has been discovered and analyzed by security researchers. According to Fortinet’s FortiGuard Incident Response Team, the malware, which ran within a legitimate Windows process, used… Read More "Malware Analysis Reveals Sophisticated RAT With Corrupted Headers"
The 2024 Swedish tournament mirrors similar extreme right-wing martial arts tournaments hosted elsewhere in Europe for years. It also indicates the success of the Active Club model in spreading to the European continent. There are dozens of the fight clubs… Read More "A Swedish MMA Tournament Spotlights the Trump Administration’s Handling of Far-Right Terrorism"
Fake installers for popular artificial intelligence (AI) tools like OpenAI ChatGPT and InVideo AI are being used as lures to propagate various threats, such as the CyberLock and Lucky_Gh0$t ransomware families, and a new malware dubbed Numero. “CyberLock ransomware, developed… Read More "Cybercriminals Target AI Users with Malware-Loaded Installers Posing as Popular Tools"
ConnectWise, the developer of remote access and support software ScreenConnect, has confirmed it was targeted by a cyber-attack from a nation-state threat actor. In a message sent to Infosecurity, a ConnectWise spokesperson said, “We recently learned of suspicious activity within… Read More "ConnectWise Confirms Hack, “Very Small Number” of Customers Affected"
May 29, 2025Ravie LakshmananMalware / Windows Security Cybersecurity researchers have taken the wraps off an unusual cyber attack that leveraged malware with corrupted DOS and PE headers, according to new findings from Fortinet. The DOS (Disk Operating System) and PE… Read More "New Windows RAT Evades Detection for Weeks Using Corrupted DOS and PE Headers"
“What certainly popped [from the survey results] is how difficult the job ends up being for CISOs who work in that $1 billion to $5 billion range,” Kakolowski of IANS said in an interview. “What we see when we put… Read More "Even $5M a year can’t keep top CISOs happy"
