A state-sponsored threat group, dubbed "Laundry Bear," sends "half-click" phishing emails that require a victim only to open or preview the message.
Threat actors used credentials obtained from other companies to hack into Chick-fil-A One accounts. The post Chick-fil-A Accounts Get Fried in Credential Stuffing Attack appeared first on SecurityWeek.
Anbieter Filigran zeigt eine Lücke zwischen Threat Intelligence in der Theorie und ihrer Umsetzung auf. Viele Unternehmen erkennen Risiken, können sie aber nicht priorisieren. Automatisierung und CTEM sollen Abhilfe schaffen.
An advanced threat actor is abusing the update mechanism for the ViPNet private networking product suite to target Russian organizations, including government agencies. […]
AI models left to both interpret and execute commands eliminate critical cybersecurity oversight.
Fast alle Sicherheitsverantwortlichen schätzen Cyber Threat Intelligence als wertvoll ein, aber nur jeder Vierte lässt sie tatsächlich in Entscheidungen einfließen. Ein aktueller SANS-Report erklärt, warum CTI-Teams trotz wachsender Anerkennung um echten Einfluss kämpfen.
A Russian-speaking threat actor known as „bandcampro“ used Google’s open-source Gemini CLI AI tool as a hacking agent and to operate a small-scale botnet. […]
SonicWall warns that threat actors have been exploiting two SMA1000 vulnerabilities, tracked as CVE-2026-15409 and CVE-2026-15410, in zero-day attacks and urges customers to install the newly released security updates. […]
A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to distribute infostealer malware. […]
A threat actor poisoned several Jscrambler NPM package versions to drop a cross-platform credential stealer. The post Multiple Jscrambler Packages Impacted by Supply Chain Attack appeared first on SecurityWeek.