New BitLocker extortion activity: RDP, MSSQL, RMM Abuse
Recently, our teams in Latin America investigated a series of incidents involving misconfiguration, the deployment of BitLocker, and the exploitation of corporate printers. Attackers used…
Latest Cybersecurity News — Page 150
View all →
Securing AI agent harness files from config attacks
Attackers have shifted from hiding from AI tools to running inside them. By poisoning the config files that govern AI coding assistants, a new worm…
Closing the Identity Gaps in Critical Infrastructure Security
In May 2021, the Colonial Pipeline ransomware attack showed how quickly a compromised account can become a national issue. The attackers reportedly achieved initial access…
Hackers Abuse GitHub Actions to Backdoor AsyncAPI npm Packages With Miasma RAT
A supply chain attack has pushed Miasma malware into trusted AsyncAPI npm packages, putting developer systems and automated build environments at risk. Attackers used a…
Keeper privileged access management Asite
Keeper Security has announced that UK-based construction technology provider Asite has deployed KeeperPAM® to strengthen privileged access management, secrets governance and credential security across its…
Hackers Abuse Ethereum Smart Contracts to Hide Amatera Stealer C2 Servers
Hackers are increasingly abusing decentralized infrastructure and legitimate development frameworks to evade detection, with a newly observed campaign leveraging Ethereum smart contracts to conceal command-and-control…
Fig Expands SecOps Engineering Lifecycle as Security Teams Seek More Resilient Infrastructure
Security operations teams are managing environments that change almost as quickly as the threats they are designed to detect. New cloud services, data sources, detections,…
Security Teams Do Not Need More AI Hype. They Need AI-Ready Workflows.
21 Jul Security Teams Do Not Need More AI Hype. They Need AI-Ready Workflows. Posted at 10:15h in Blogs by Taylor Fox AI Delivers Value…
AI agents tricked into recommending malicious GitHub repositories
Roughly 7,600 malicious GitHub repositories were uncovered, more than 800 of them posing as AI Skills or Model Context Protocol (MCP) servers, in a wave…
New ClickLock Stealer locks your Mac until you hand over your password
ClickLock Stealer is a new, modular macOS infostealer delivered via ClickFix-style phishing pages that can lock a victim’s Mac, steal their macOS password, browser and…
Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access
Ravie LakshmananJul 21, 2026Vulnerability / Network Security Threat actors have been observed exploiting a now-patched high-severity Palo Alto Networks PAN-OS vulnerability as an entry point…
Kanishka Narayan takes on AI sovereignty in Burnham cabinet
Kanishka Narayan, who was previously minister for artificial intelligence (AI) under the UK’s Keir Starmer government, has joined the Andy Burnham cabinet, jointly working in…