The latest effort to renewSection 702 surveillance powers faces significant opposition, with critics arguing that proposed reforms do not adequately address concerns about privacy protections for Americans. A brief 10-day extension was recently passed after two previous votes to reauthorize the program without changes failed in the House of Representatives.…

A sophisticated cyber campaign, attributed to the North Korea-linked hacking group Void Dokkaebi (also known as Famous Chollima), is targeting software developers by leveraging fake job interviews to distribute malware. The attackers entice developers into cloning malicious code repositories disguised as technical assessments, thereby transforming their machines and development projects…

Cybersecurity researchers have uncovered a sophisticated PowerShell script hosted on Pastebin, meticulously designed to steal Telegram session data from both desktop and web-based clients. This alarming discovery highlights a growing threat where attackers leverage seemingly innocuous platforms to distribute potent malware disguised as routine system updates. The “Windows Telemetry Update,”…

In an era increasingly defined by AI-powered interactions, the challenge of proving identity is reaching a critical juncture. As autonomous agents become more sophisticated and capable of mimicking human behavior, traditional methods of verification are showing their limitations, prompting a global re-evaluation of digital security protocols. A recent report from…

Cybercriminals are exploiting the familiar CAPTCHA process, tricking unsuspecting internet users into sending expensive international text messages through fake verification pages. This emerging threat, documented by Infoblox Threat Intel researchers, is part of a sophisticated International Revenue Share Fraud (IRSF) scheme that has been active since at least June 2020.…

A sophisticated cyber threat targeting global organizations has been identified, where hackers linked to China are meticulously constructing extensive networks of compromised routers and edge devices to conceal their operations. This evolving tactic allows malicious actors to execute cyber espionage and attacks while effectively hiding their digital footprint, making them…

A sophisticated cybercrime operation has been uncovered where attackers leveraged automated tools, including AI assistance and Telegram bots, to hack into over 900 companies globally. The campaign, centered around a tool named “Bissa scanner,” systematically targeted internet-facing web applications to harvest sensitive credentials and alert the perpetrators in real-time. This…

Ransomware attackers are evolving their tactics, with affiliates of the Trigona ransomware group now employing a custom-built data exfiltration tool. This sophisticated development allows for more precise, rapid, and controlled theft of sensitive data, posing a significant new challenge for cybersecurity defenses. Trigona, operating under a Ransomware-as-a-Service (RaaS) model since…

A sophisticated supply chain attack has been uncovered, wherein a malicious npm package named js-logger-pack was used to transform Hugging Face, a popular platform for AI models, into a backend for malware distribution and data exfiltration. This discovery by JFrog Security researchers highlights a disturbing evolution in cyber tactics, leveraging…

A state-sponsored hacking group has successfully implanted a sophisticated backdoor, codenamed Firestarter, onto Cisco network security devices. This malware is capable of persisting through firmware updates and standard reboots, raising significant concerns for government and critical infrastructure networks. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the United Kingdom’s…

North Korean hackers are deploying a sophisticated scheme, posing as legitimate remote IT workers to infiltrate companies globally and funnel illicit funds back to Pyongyang, according to recent cybersecurity research. This operation, active since at least 2017, has evolved into a multi-continental enterprise, targeting new industries and larger organizations. The…

Researchers have identified surveillance campaigns that exploited vulnerabilities in mobile phone network signaling protocols, marking the first documented instance of linking commercial surveillance to the core infrastructure of telecommunications operators. The campaigns, conducted by unidentified entities, utilized custom tools to mimic legitimate operators and manipulate signaling pathways to conceal their…