Microsoft details Storm-0501’s focus on ransomware in the cloud
A financially motivated threat group operating since 2021 has refined its technical tradecraft, honing its focus on cloud-based systems that allow it to expand ransomware…
Latest Cybersecurity News — Page 1852
View all →
Over 28,000 Citrix devices vulnerable to new exploited RCE flaw
More than 28,200 Citrix instances are vulnerable to a critical remote code execution vulnerability tracked as CVE-2025-7775 that is already being exploited in the wild.…
CISA releases New ICS Advisories Surrounding Vulnerabilities and Exploits
CISA released three significant Industrial Control Systems (ICS) advisories on August 26, 2025, alerting organizations to critical vulnerabilities affecting widely-deployed automation systems. These advisories highlight…
Cephalus Ransomware Exploits RDP for Initial Access in Latest Attack Campaign
Cybersecurity researchers at Huntress identified a novel ransomware variant dubbed Cephalus, deployed in two separate incidents targeting organizations lacking robust access controls. This emerging threat,…
AI Excites and Depresses Me
I think, looking back, we might say that the first week of July 2025 was the start of AGI. Like, proto-AGI. All because of Claude…
Anthropic Disrupts AI-Powered Cyberattacks Automating Theft and Extortion Across Critical Sectors
Aug 27, 2025Ravie LakshmananCyber Attack / Artificial Intelligence Anthropic on Wednesday revealed that it disrupted a sophisticated operation that weaponized its artificial intelligence (AI)-powered chatbot…
Incident response planning cuts the risk of claiming on cyber security insurance
Although at their heart they focus on post-breach mitigation and remediation, cyber incident response plans are emerging as a very important cyber security control when…
This is Intelligence | Daniel Miessler
pnpm install -g ccusage I have a friend named Marcus Hutchins who doesn’t believe modern AI is intelligent. He thinks it’s basically autocomplete. We actually…
NetScaler warns hackers are exploiting zero-day vulnerability
NetScaler on Tuesday released security updates for vulnerabilities in its application delivery controller and remote-access tools as it warned that hackers were exploiting a critical…
New Cache Deception Attack Exploits Miscommunication Between Cache and Web Server
A newly documented cache deception attack leverages mismatches in path normalization and delimiter handling between caching layers and origin servers to expose sensitive endpoints and…
Hundreds of Salesforce customer orgs hit in clever attack with potentially huge blast radius
A threat group Google tracks as UNC6395 has pilfered troves of data from Salesforce corporate instances, in search of credentials that can be used to…
PDS confirms ‘strategic restructuring’ with series of interim senior leadership hires
The Police Digital Service (PDS) has completed a “strategic restructuring” of its senior leadership team, more than a year after two of its employees were arrested…