Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Attackers in Latin America are exploiting misconfigured office printers and BitLocker encryption to extort small ransoms from businesses. Kaspersky investigated two incidents in Colombia (June) and Mexico (May), where attackers compromised systems via exposed RDP services, encrypted critical data with BitLocker, and printed ransom notes demanding payments as low as $3,000.
Attackers use BitLocker encryption and office printers to extort organizations in Latin America for small ransoms.
The article details two incidents in Colombia and Mexico where attackers used corporate printers to notify victims of BitLocker encryption and demand ransom. The attackers exploited misconfigurations to deploy BitLocker and used printers to deliver ransom notes.
AI-generated code introduces an average of 15 vulnerabilities per codebase, but the actual risk varies significantly depending on the programming language, framework, and use case. Certain frameworks amplify the risk because they handle sensitive operations like authentication, database queries, or input validation that are particularly error-prone when generated by models without full application context.
The article describes how attackers are poisoning AI coding assistant configuration files to achieve silent persistence and spread across organizations. The Mini Shai-Hulud worm targets config files of tools like Claude Code, Copilot, and Cursor.
AI-generated code introduces an average of 15 vulnerabilities per codebase, but the actual risk varies significantly depending on the programming language, framework, and use case. Certain frameworks amplify the risk because they handle sensitive operations like authentication, database queries, or input validation that are particularly error-prone when generated by models without full application context.