Storm-0501 hackers shift to ransomware attacks in the cloud
Microsoft warns that a threat actor tracked as Storm-0501 has evolved its operations, shifting away from encrypting devices with ransomware to focusing on cloud-based encryption,…
Month: August 2025
Chinese Hacker Suspect Arrested in South Korea Over Major Financial Cyberattack
South Korean authorities have successfully extradited a key suspect in a large-scale hacking operation that resulted in the embezzlement of over 38 billion won (approximately…
First AI-Powered Ransomware PromptLock Targets Windows, Linux and macOS
ESET has identified PromptLock, the first AI-powered ransomware, using OpenAI models to generate scripts that target Windows, Linux and macOS. It was only a matter…
“Widespread data theft” hits Salesforce customers via third party
Compromised OAuth tokens through a third-party app have resulted in large-scale data raids on instances of the Salesforce customer relationship management (CRM) platform, by an…
I Have Two Groups of AI Friends
I have two groups of very smart cybersecurity friends, and they see AI completely differently. The first group thinks AI is mostly a scam, like…
New ShadowCaptcha Attack Exploiting Hundreds of WordPress Sites to Tricks Victims into Executing Malicious Commands
A sophisticated global cybercrime campaign dubbed “ShadowCaptcha” has emerged as a significant threat to organizations worldwide, leveraging fake Google and Cloudflare CAPTCHA pages to trick…
International coalition calls out three Chinese companies over hacking campaign
An unusually broad coalition composed of the United States, its traditional English-speaking allies, and other nations including Germany, Italy and Japan is calling out three…
How I See AI Affecting Education
By default AI will magnify gaps between good and bad students June 1, 2025 I’ve got a one-liner for what AI will do to education.…
Experimental PromptLock ransomware uses AI to encrypt, steal data
Threat researchers discovered the first AI-powered ransomware, called PromptLock, that uses Lua scripts to steal and encrypt data on Windows, macOS, and Linux systems. The…
Attacker Context and Historical iOS Zero-Click Similarities
Apple has issued emergency security updates across its entire ecosystem to address CVE-2025-43300, a critical zero-day vulnerability in the ImageIO framework that has been actively exploited in…
DTA trials AI to assist Digital Marketplace application reviews
The federal government is set to pilot the use of artificial intelligence to help review applications for its Digital Marketplace 2 panel. The Digital Transformation…
Salt Typhoon hacking campaign goes beyond previously disclosed targets, world cyber agencies say
A notorious Chinese hacking campaign against telecommunications companies has now reached into a variety of additional sectors across the globe, including government, transportation, lodging and…