Top lawmaker asks White House to address open-source software risks
Listen to the article 3 min This audio is auto-generated. Please let us know if you have feedback. A top Senate Republican is pressing the…
Author: Cybernoz
Microsoft 365 accounts targeted in wave of OAuth phishing attacks
Multiple threat actors are compromising Microsoft 365 accounts in phishing attacks that leverage the OAuth device code authorization mechanism. Attackers trick victims into entering a device…
New Research Uncovers the Alliance Between Qilin, DragonForce and LockBit
Three major ransomware groups have joined forces to create what cybersecurity experts are calling one of the most concerning developments in the criminal underground. On…
Keyboard Lag Leads Amazon to North Korean Impostor in Remote Role – Hackread – Cybersecurity News, Data Breaches, AI, and More
In an era where remote work is the norm, it can be hard to know for sure who is on the other side of a…
CL0P Ransomware Group Targets Gladinet CentreStack In New Campaign
The CL0P ransomware group appears to be targeting internet-facing Gladinet CentreStack file servers in its latest extortion campaign. The Curated Intelligence project said in a…
State-linked and criminal hackers use device code phishing against M365 users
Multiple threat groups have been ramping up attacks using a technique called device code phishing to trick users into granting access to their Microsoft 365…
‘Sensitive’ data stolen in Westminster City Council cyber attack
Westminster City Council has said that “potentially sensitive and personal” data was stolen by hackers during the cyber attack that hit three neighbouring London authorities…
Rockrose Development suffers security breach affecting 47,000 people
Dive Brief: Apartment owner and developer Rockrose Development Corp. recently found that unauthorized individuals hacked its systems and claimed to have acquired confidential information, according…
New UEFI flaw enables pre-boot attacks on motherboards from Gigabyte, MSI, ASUS, ASRock
The UEFI firmware implementation in some motherboards from ASUS, Gigabyte, MSI, and ASRock is vulnerable to direct memory access (DMA) attacks that can bypass early-boot memory…
Scripted Sparrow Uses Automation to Generate and Send their Attack Messages
Scripted Sparrow is a newly identified Business Email Compromise (BEC) group operating across three continents. Their operations are vast, leveraging significant automation to generate and…
Cracked Software and YouTube Videos Spread CountLoader and GachiLoader Malware
Cybersecurity researchers have disclosed details of a new campaign that has used cracked software distribution sites as a distribution vector for a new version of…
AI safeguards improving, says UK government-backed body
The safeguards in place to ensure that artificial intelligence (AI) models behave appropriately and as intended appear to be improving, or so claims the UK…