Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
FortiGuard Labs has identified an ongoing Ousaban malware campaign specifically targeting organizations in Spain and Portugal. The attackers employ phishing emails containing malicious PDF attachments, which use steganography to conceal malicious code.
The article is a weekly threat intelligence report covering recent attacks and breaches. It highlights a third-party breach affecting Texas Parks and Wildlife, a supply chain attack on WordPress plugin vendor ShapedPlugin, and a cyberattack on digital health company iRhythm Technologies.
The Texas Parks and Wildlife Department suffered a third-party data breach exposing personal data of 3,087,721 hunting and fishing license customers, including driver's license details and addresses, though payment data remained secure. WordPress plugin vendor ShapedPlugin experienced a supply chain attack delivering malicious updates that stole admin credentials and modified websites, while iRhythm Technologies confirmed a social engineering attack compromising health data.
The article is a weekly threat intelligence report covering recent attacks and breaches. It highlights a third-party breach affecting Texas Parks and Wildlife, a supply chain attack on WordPress plugin vendor ShapedPlugin, and a cyberattack on digital health company iRhythm Technologies.
For the latest discoveries in cyber research for the week of 22nd June, please download our Threat Intelligence Bulletin. TOP ATTACKS AND...
This research explores how AI can generate novel browser-based ransomware techniques. It shows that DeepSeek connected AI hallucinations with real browser capabilities to create a plausible attack using the File System Access API. The technique is particularly concerning on Android, where photo directories can be accessed after user approval via a fake AI image enhancement prompt.