cyberintel.kalymoon.com · 8659 articles · updated every 4 hours · grows forever
Recent Hacks Underscore Persistent and Growing Threats to Smaller Organizations Small and mid-sized healthcare organizations - including medical specialty practices and regional clinics - continue to …
Days After Beating Musk in Court, ChatGPT Maker Moves Toward Public Debut OpenAI is preparing to confidentially file its IPO prospectus as soon as Friday, working with Goldman Sachs and Morgan Stanley…
Acquisition Focuses on Validating AI Agents, Models in Critical Security Workflows Check Point said its acquisition of AI evaluation startup Deepchecks will help validate and monitor autonomous securi…
A 23-year-old radio enthusiast spent £300 on a piece of kit from the internet, and used it to bring four packed high-speed trains to a screeching halt. His defence in court? Possibly the most creative…
A large-scale ad fraud operation called Trapdoor has been discovered targeting Android users through 455 malicious apps, quietly generating fake ad clicks and draining real advertising budgets across …
A new botnet called Void has emerged on the cybercrime underground, bringing a troubling twist to how attackers manage their operations remotely. Instead of relying on traditional servers that authori…
A new threat campaign is targeting Windows users in India by disguising malicious files as official income tax documents. Researchers have tracked the operation under the name TAX#TRIDENT, and it has …
Administrators of the Drupal open source content management platform are rushing to install an emergency patch issued today to fix a “highly critical” SQL injection vulnerability in the application’s …
Government leaders revealed that, in spite of state laws meant to improve cyber hygiene, an analysis of incidents showed issues persist and visibility falls short.
The disguised apps use WebView automation, JavaScript injection, and OTP interception to avoid detection and complete fraudulent subscriptions.
Open source software giant GitHub confirmed a data breach this week involving the theft of thousands of repos. One threat actor — TeamPCP — took credit.
There is nothing cybersecurity professionals are more excited about, and nothing they fear more, than AI.
Threat actors brute-forced VPN credentials and bypassed multi-factor authentication (MFA) on SonicWall Gen6 SSL-VPN appliances to deploy tools used in ransomware attacks. [...]
The Ukrainian cyberpolice, working in conjunction with U.S. law enforcement, has identified an 18-year-old man from Odesa suspected of running an infostealer malware operation targeting users of an on…
Instructure confirms cybersecurity incident K-12 Dive
What we know about the Canvas hack that has impacted thousands of schools CNN
A Single Developer Downloaded a Poisoned VS Code Extension, and Now Look GitHub warned late Tuesday that hackers stole roughly 3,800 internal repositories from the Microsoft-owned platform after a dev…
There is a quiet gap inside many SOCs. It sits between the moment Tier 1 says “this should be escalated” and the moment the response team can actually act on it. Too often, the alert moves forward, bu…
A proof-of-concept (PoC) exploit was published for a new Linux Local Privilege Escalation (LPE) vulnerability dubbed “PinTheft.” Discovered by Aaron Esau of the V12 security team, the flaw allows loca…
A dangerous new Android malware called DevilNFC has emerged, combining NFC relay attacks with a Kiosk Mode trap that locks victims inside a fake banking screen until their card data is stolen. The mal…
Verizon DBIR finds 31% of data breaches began with software flaws last year
Barracuda reveals new CypherLoc scareware has featured in nearly three million attacks
The prolific threat group TeamPCP has claimed a hack into GitHub’s internal repositories