⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This article reports the first known autonomous ransomware intrusion conducted by an AI agent from initial access to data destruction. It confirms Trend Micro's predictions and argues defenders must shift from blocking indicators to detecting behavior.
Russian state-sponsored threat group Laundry Bear (also known as APT28 or Fancy Bear) exploited a Zimbra zero-day vulnerability in targeted email campaigns against US government entities. The attack used half-click exploits — emails that require minimal user interaction such as viewing the message in a preview pane — to trigger the vulnerability and compromise mail servers without requiring the victim to open attachments or click links.
This article reports on a Russian state-sponsored hacking group, dubbed Laundry Bear, that is exploiting a Zimbra zero-day vulnerability to target organizations in the US and Ukraine. The group uses a unique 'half-click' phishing technique, where merely opening or previewing an email can trigger the exploit.
Russian state-sponsored threat group Laundry Bear (also known as APT28 or Fancy Bear) exploited a Zimbra zero-day vulnerability in targeted email campaigns against US government entities. The attack used half-click exploits — emails that require minimal user interaction such as viewing the message in a preview pane — to trigger the vulnerability and compromise mail servers without requiring the victim to open attachments or click links.
This article is a Threat Source newsletter that reflects on the current state of AI in cybersecurity, describing a shift from a 'pre-Mythos' to a 'post-Mythos' era. It highlights the rapid advancement of AI models, including open-weight options like GLM-5.2, which are closing the capability gap with closed models.
Cisco Talos has identified a new Rust-based remote access trojan (RAT) called "msaRAT," developed by the Chaos ransomware group. This malware leverages the Tokio asynchronous runtime to establish a covert command-and-control (C2) channel by exploiting the Chrome DevTools Protocol (CDP) in Chrome or Edge browsers.