Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This article reports that ShinyHunters suspect Rey has been detained in Jordan and is assisting the FBI in identifying other members. The arrest is part of a broader law enforcement effort against the digital extortion group.
This article reports a new China-aligned threat actor TA419 conducting credential phishing against US AI policy experts, impersonating academics and policymakers. The attacks utilize sophisticated AitM techniques and multi-stage redirection chains to steal credentials.
Google is developing a feature for Gemini on macOS that allows the AI assistant to access files, apps, and the web without per-action permissions. This would give Gemini nearly unrestricted control over the device.
A suspected member of the ShinyHunters hacking group named "Rey" is reportedly detained in Jordan and cooperating with the FBI. The cooperation aims to track down other group members. This could lead to dismantling parts of the extortion network.
MI5 issued an unprecedented alert stating that the Chinese MSS, through the front company CGTRI, funded research involving over 100 UK-linked academics in sensitive fields like AI and cybersecurity. The research aims to enhance MSS espionage capabilities.
The Warlock threat actor is exploiting Microsoft SharePoint flaws to target critical infrastructure, government, and education entities in Europe, Africa, and Latin America. They disable security tools using BYOVD and deploy ransomware quickly through domain replication.