Operation Bleeding Bear
Key Takeaways li]:list-disc”> Writing and executing a VBS script that uses PowerShell to add a Windows Defender exclusion on the root directory (C:) Writing and…
Latest Cybersecurity News — Page 21
View all →
Microsoft fixes broken Excel copy and paste for all Office users
Microsoft has fixed a known issue that causes copy-and-paste failures for Excel users after installing the September 2026 security updates. The bug was confirmed following…
Microsoft Entra ID Retires SMS First-Factor Sign-In in February 2027
Microsoft is retiring SMS first-factor sign-in for Microsoft Entra ID workforce tenants worldwide and requires organizations to migrate affected users before February 1, 2027. The…
US and China Discuss Alerting Each Other to AI National Security Threats
Talks have begun between US and Chinese officials to propose a mechanism for the two countries to notify each other of artificial intelligence incidents which…
NightEagle Uses BlueKeep and DCSync to Move Toward Active Directory Domain Controllers
NightEagle, an espionage-focused threat group also tracked as APT-Q-95, has expanded its operations from Asian targets to Russian organizations, using a layered intrusion chain that…
The Cyber Guild’s Uniting Women In Cyber Conference, Oct. 8, 2026
In a recent Cybercrime Magazine Podcast episode, advisory board member Hillary Coover, MBA and event program lead Lara Meadows, CISSP, CISM, volunteers at The Cyber…
North Korea’s job interview scam runs both ways
Attackers are targeting members of the Rust Project and maintainers of widely used crates (Rust code libraries), dangling attractive opportunities to compromise their devices and…
ShinyHunters hacks rival extortion gang and takes over its dark web site
Reportedly, the ShinyHunters extortion group breached the leak site of one of its competitors, the Clop ransomware gang. ShinyHunters is a financially motivated cybercrime and…
ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure
Threat actors are leveraging ClickFix-like lures to deliver a previously undocumented remote access trojan (RAT) called ChainScript. “ChainScript has appeared under multiple build names, including…
Barnet council bringing Capita IT work in-house after alternative contract ‘abandoned’
Barnet Council will bring IT services in-house at the end of this month after being forced into an eleventh-hour decision to abandon its plan to…
ASD says prompt injection in AI cannot be fixed
The Australian Signals Directorate (ASD) has issued new guidance aimed at enterprises, saying a central security weakness in agentic artificial intelligence (AI) cannot be resolved…
Rust Team Members and Popular Crate Owners Targeted via Video Calls
The Rust project warned last week that an ongoing social engineering campaign is targeting Rust-lang team members and the owners of popular crates to hijack…