Wiz Uncovers SES Abuse Campaign Using Stolen AWS Access Keys
Intro The Wiz Research team continuously monitors trends across the threat landscape using Wiz Defend’s threat detection rules. Our goal is to track attacker tradecraft…
Month: July 2026
Tracking Advanced Persistent Threat Groups
Key takeaways Advanced Persistent Threats (APTs) are sophisticated, long-term cyber campaigns conducted by well-funded human adversaries (often nation-states) who target specific organizations for espionage, data…
Ernst & Young discloses data breach after support system hack
Ernst & Young is notifying customers of a data breach caused by the compromise of a third-party support ticket system used by its IT personnel.…
New Windows LegacyHive 0-Day Vulnerability Allow Hackers to Gain Admin Access
A Windows zero-day vulnerability, dubbed LegacyHive (MSNightmare), abuses the User Profile Service to enable local privilege escalation, tampering with administrator accounts, and admin-level code execution. LegacyHive…
San Francisco Demands Apple and Google Delete AI ‘Nudify’ Apps From App Stores
Apple and Google have been ordered to take down apps that can “nudify” or “undress” people and told that they must stop profiting from the…
“TTF Trap” Phishing Emails Use Fake Font Files to Deliver Windows Malware
An email that appears to contain a shipping document, payment request, or business proposal can infect a Windows computer even when one of its main…
Sophos Fusion: A Complete AI-Native Cyber Defense System
17 Jul Sophos Fusion: A Complete AI-Native Cyber Defense System Posted at 08:23h in Blogs by Taylor Fox This week in cybersecurity from the editors…
Spirals ransomware locks down victim systems in under 24 hours
A previously unknown ransomware strain called Spirals was used last month in an attack against an IT services company in South Asia, where attackers went…
Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwords
Shark’s cloud-connected robot vacuums are currently exposed by an unpatched AWS (Amazon Web Services) IoT (Internet of Things) policy flaw that could turn one compromised…
E.U. Orders Google to Open Android Mic, Camera and Screen to Rival AI Assistants
The European Commission on Thursday ordered Google to give rival AI assistants the same reach into Android that Gemini already has: the camera, the microphone,…
Datacentre dive: Through the looking glass at Telehouse South
I cross the road on a concrete footbridge, the multi-lane A1261 rumbling beneath. Ahead, men in the “uniform” of contemporary IT staff trudge to their…
ClickFix Attacks Fuel UAC-0145 Cyber Campaigns In Ukraine
The ClickFix attacks technique has become a key initial access method for the UAC-0145 cyber threat cluster, according to a new report from Ukraine’s Computer…