⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Law enforcement agencies from Spain, Germany, the UK, Romania, and the United States collaborated to arrest three individuals linked to the KillSec ransomware group, including a 16-year-old suspected administrator. The operation, led by Hamburg police, seized the group's data leak site and servers, disrupting their extortion activities.
This week's ThreatsDay bulletin focuses on how mundane system operations—such as inspect, cache, compile, store, and trust—can become attack vectors when systems do more than expected. It covers threats like ATM jackpotting by Tren de Aragua, which used malware and cryptocurrency laundering, and other incidents involving reused flaws and weak defaults.
Google announced new Advanced Protection features for Android that provide enhanced defenses against advanced threats. The program offers stronger authentication, phishing protection, and app verification to keep user data safe, particularly for those at high risk of targeted attacks.
Researchers at Sucuri discovered a WordPress backdoor named SC that employs multiple redundant persistence methods, ensuring it rebuilds itself after any cleanup attempt. The malware lives in files, the database, and shared memory, and is controlled via blockchain, making it highly resilient to traditional removal techniques.
International police operation dismantled the KillSec ransomware gang, arresting three people and seizing their infrastructure. The alleged leader is a 16-year-old, highlighting the young age of some cybercriminals and the global collaboration required to take down such groups.
The article explains shadow AI as the use of AI tools without employer knowledge, highlighting how employees may inadvertently leak sensitive data by using unauthorized chatbots for work tasks. It emphasizes the need for organizations to address this risk through proper governance and approved alternatives.