China-nexus group linked to multiyear campaign targeting US, Canadian medical research
A report from Google links a sophisticated espionage effort targeting information about viruses, AI and military information. Source link
Category: CyberSecurityDive
ShinyHunters linked to exploitation of critical flaw in Oracle PeopleSoft
More than 100 organizations, about two-thirds in higher education, have been notified of potential impact. Source link
Agentic AI surges in financial sector even as many firms fail to manage security risks
One-fifth of firms aren’t even sure if they’ve been hacked through their AI tools, according to a new report. Source link
It’s Mythos’ world now. How do we live in it?
Anthropic’s powerful model raises difficult questions about how government and industry should work together to safeguard systems in the AI era. Source link
FIFA World Cup expected to face extensive criminal, hacktivist cyber threats
Researchers warn that thousands of malicious domains are already in place, as fans and tournament organizers face potential attacks. Source link
Enterprises report increasing budgets for security training in AI and other critical topics
Finding the time to train employees remains the biggest impediment to programs’ success, according to a new report. Source link
CISA, researchers warn of escalating attacks using Cisco Catalyst SD-WAN flaws
Multiple vulnerabilities are being chained together to gain additional access to systems. Source link
CISA gives agencies new vulnerability remediation deadlines that take risk levels into account
The cybersecurity agency says it wants to help network defenders prioritize the fixes that matter the most. Source link
Companies are failing to keep up with AI’s identity sprawl, creating entry points for hackers
Three-quarters of organizations say they aren’t fully overseeing the activities of user accounts belonging to agents and other AI tools. Source link
Check Point warns of zero-day flaw targeted by ransomware affiliate
A vulnerability in the company’s VPN deployments has faced exploitation since early May. Source link
IT sector faces growing threats from IP-hungry China, AI-enabled cybercriminals
Businesses also need to watch out for North Korean remote IT worker schemes, according to a new CrowdStrike report. Source link
Companies aren’t prepared for how AI is accelerating impersonation attacks
Businesses generally aren’t taking a proactive enough approach to blocking schemes that spoof their leaders’ identities, according to a new report. Source link