A long-running phishing operation has been stealing banking credentials from customers of Mexican financial institutions without running any server infrastructure of its own, instead hiding inside trusted cloud platforms. New analysis from Group-IB detailed the campaign, which it called GitBait,… Read More "Serverless Phishing Kit on GitHub Targets Mexican Banks"
Does the world really need another study of shadow AI? That was my first thought going into this project. Reading dozens of previous reports did not change that impression: there’s a lot of shadow AI out there, and a lot… Read More "Uncovering the Shadow AI Paradox"
A North Korean scheme to plant fake IT workers inside Western companies has been exposed from the inside, after one of its operatives tried to infiltrate the very firm that tracks the fraud. Risk intelligence provider Nisos recently detailed how… Read More "North Korean Hiring Fraud Runs on AI and US Laptop Farms"
Low-code workflow builders have flourished in the AI wave, providing the “shovels and picks” for non-technical users to make AI-powered apps. Flowise is one of those tools and, like others in its category, it has the potential to leak data… Read More "Downstream Data: Investigating AI Data Leaks in Flowise"
A ShinyHunters campaign has resulted in the compromise of information belonging to over 197,000 customers of fashion outlet Zara, according to HaveIBeenPwned. The data breach notification service posted a brief note on its website explaining data stolen during an April… Read More "Zara Data Breach Impacts Nearly 200,000 Customers"
The modern cybersecurity landscape is being redefined by the human element. With every individual user accessing your network, tools, and sensitive data, managing your human attack surface is growing more critical than ever. Yet, as user autonomy increases and AI… Read More "Solving Human Risk: Close the Visibility Gap"
A UK water company has been fined nearly £1m ($1.4m) by the data protection regulator after a two-year-long incident resulted in the compromise of personal information on over 633,000 people. South Staffordshire Water and parent company South Staffordshire PLC agreed… Read More "South Staffordshire Water Fined £1m After Data Breach"
On June 4, Asana identified a bug in its Model Context Protocol (MCP) server and took the server offline to investigate. While the incident was not the result of an external attack, the bug could have exposed data belonging to… Read More "Asana Discloses Data Exposure Bug in MCP Server"
Threat actors associated with the Anubis ransomware operation have been observed exploiting the Citrix Bleed 2 (CVE-2025-5777) vulnerability to obtain initial access. “Although tactics differ between affiliates, common patterns emerged in tradecraft through use of legitimate Remote Management and Monitoring… Read More "Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials"
Security researchers have uncovered covert infostealer malware hidden in one of the top-ranking repositories on Hugging Face, in another example of the dangers posed by the AI supply chain. AI security vendor HiddenLayer explained in a blog post that it had… Read More "Malicious Hugging Face Repository Typosquats OpenAI"
