German government says it will oppose EU mass-scanning proposal
Encryption lives on in Europe. For now. The German government has said it will oppose a piece of European Union legislation later this month that…
Category: Cyberscoop
Microsoft pins GoAnywhere zero-day attacks to ransomware affiliate Storm-1175
Microsoft Threat Intelligence said a cybercriminal group it tracks as Storm-1175 has exploited a maximum-severity vulnerability in GoAnywhere MFT to initiate multi-stage attacks including ransomware.…
OpenAI: Threat actors use us to be efficient, not make new tools
A long-running theme in the use of adversarial AI since the advent of large language models has been the automation and enhancement of well-established hacking…
Oracle zero-day defect amplifies panic over Clop’s data theft attack spree
Federal cyber authorities and threat hunters are on edge following Oracle’s Saturday disclosure of an actively exploited zero-day vulnerability the Clop ransomware group used to…
House Dems seek info about ICE spyware contract, wary of potential abuses
Three House Democrats questioned the Department of Homeland Security on Monday over a reported Immigration and Customs Enforcement contract with a spyware provider that they…
Potential EU law sparks global concerns over end-to-end encryption for messaging apps
Tech experts and companies offering encrypted messaging services are warning that pending European regulation, which would grant governments broad authority to scan messages and content…
Security leaders at Okta and Zscaler share lessons from Salesloft Drift attacks
When security researchers issued warnings about the Salesloft Drift issues last month, two prominent cybersecurity companies found themselves facing the same threat — but their…
Federal judiciary touts cybersecurity work in wake of latest major breach
Federal courts are upgrading their cybersecurity on a number of fronts, but multifactor authentication for the system that gives the public access to court data…
Researchers say Israeli government likely behind AI-generated disinfo campaign in Iran
A coordinated Israeli-backed network of social media accounts pushed anti-government propaganda — including deepfakes and other AI-generated content — to Iranians as real-world kinetic attacks…
Red Hat confirms breach of GitLab instance, which stored company’s consulting data
Red Hat on Thursday confirmed an attacker gained access to and stole data from a GitLab instance used by its consulting team, exposing some customer…
Here is the email Clop attackers sent to Oracle customers
Emails sent to Oracle customers by members of the Clop ransomware group assert that the cybercriminals are solely interested in a financial payout, framing the…
Android spyware disguised as legitimate messaging apps targets UAE victims, researchers reveal
Researchers have found two Android spyware families masquerading as messaging apps Signal and ToTok, apparently targeting residents of the United Arab Emirates. ESET revealed the…