Hackers Using AI Agents To Validate Stolen Credit Cards
Hackers have begun leveraging AI agents to validate stolen credit cards, marking a new era in the sophistication of financial fraud. This trend highlights the…
Month: February 2025
Welcome, Hackbots: How AI Is Shaping the Future of Vulnerability Discovery
In 2024, we saw the adoption of AI in hacking workflows take off. In a survey of over 2,000 security researchers on the HackerOne Platform, 20%…
Hackers spoof Microsoft ADFS login pages to steal credentials
A help desk phishing campaign targets an organization’s Microsoft Active Directory Federation Services (ADFS) using spoofed login pages to steal credentials and bypass multi-factor authentication…
CISA Adds Actively Exploited Linux Kernel Vulnerability to Known Exploited Vuln Catalog
The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Linux kernel vulnerability, CVE-2024-53104, to its Known Exploited Vulnerabilities (KEV) Catalog, emphasizing its potential…
Google Cloud revenue soars as Alphabet continues to ride AI wave
Alphabet CEO Sundar Pichai has committed to continue investing in its cloud arm, as the firm’s fourth-quarter results confirmed Google Cloud’s revenue increased by 30%…
Crypto-stealing apps found in Apple App Store for the first time
Android and iOS apps on the Google Play Store and Apple App Store contain a malicious software development kit (SDK) designed to steal cryptocurrency wallet…
Multiple security Vulnerabilities in IBM Cloud Pak Let Attackers Execute Remote Code
IBM has released critical security updates addressing multiple vulnerabilities in its Cloud Pak for Business Automation software. These vulnerabilities, if exploited, could allow attackers to…
The Collapse of USAID Is Fueling Human Trafficking and Slavery at Scammer Compounds
“Our partners say that for some survivors they are in touch with inside the scam centers, even if they can somehow manage to get out,…
CISA tags Microsoft .NET and Apache OFBiz bugs as exploited in attacks
The US Cybersecurity & Infrastructure Security Agency (CISA) has added four vulnerabilities to its Known Exploited Vulnerabilities catalog, urging federal agencies and large organizations to apply…
Crowd-source testing helps drive Webex accessibility
Applause, which provides digital quality and crowd-sourced testing, has worked with Cisco to ensure ongoing accessibility assessments of Webex Suite and to achieve consistent conformance with…
How attackers abuse S3 Bucket Namesquatting — And How to Stop Them
With the sheer amount of data and users leveraging AWS, it’s easy for misconfigurations to slip through the cracks. One commonly overlooked area is the…
Threat Actors Exploiting DeepSeek’s Rise To Fuel Cyber Attacks
The AI startup DeepSeek has gained significant attention in recent weeks for its advanced AI models, particularly the R1 reasoning model. However, this rapid rise…