Tag
AI-driven cyberattacks are escalating rapidly, with PHP2Shell triggering millions of exploit attempts, China-linked hackers using AI agents to compromise 2,250+ cloud tenants, and CrowdStrike uncovering four additional AI-powered hacking campaigns.
ASOS app users received push notifications apparently sent by hackers claiming to have fully compromised ASOS's Snowflake data instance, in an unusual public extortion attempt involving a new Telegram-based threat actor called Xuanye Group.
Troy Hunt's Weekly Update 524 covers two ShinyHunters-related arrests (Pepijn in the Netherlands and Saif in Jordan), reflecting the inevitable legal crackdown on the long-running cybercrime group, and introduces new blog sponsor Origin, an AI agent visibility and endpoint security tool.
The FBI is rushing to investigate claims by hacking group ShinyHunters that they accessed data of thousands of employees using a zero-day exploit in Oracle PeopleSoft, with threats to leak the data if demands are not met.
Hackers breached OpenAI by exploiting vulnerabilities in third-party systems and employee validation, raising security and safety concerns in AI development. The researchers were white-hat and reported the issue, which has been patched.
Google Threat Intelligence Group revealed that an undercover researcher infiltrated the notorious hacking group TeamPCP, allowing Google to monitor their supply-chain attacks, warn targets, and assist law enforcement in arrests.
Hackers breached a Flock Safety camera, copying its data to reveal how the system tracks vehicles and people, exposing privacy vulnerabilities and security flaws in surveillance technology.
AI-induced burnout is affecting cybersecurity teams responsible for protecting critical infrastructure like hospitals and banks from cyber threats, highlighting the challenges of AI integration in defense.
Russian state-sponsored hacking group Sandworm has adopted the Clickfix attack technique to compromise devices in Ukraine, using fake CAPTCHAs to trick users into running malicious PowerShell scripts.
A discussion questioning whether AI's ability to find software bugs is a problem or an opportunity for companies like Google and Microsoft to proactively fix vulnerabilities.
Hacking group ShinyHunters claims to have leaked stolen data from Madison Square Garden, including millions of records with personal information.
Instructure, the parent company of Canvas, reached a deal with hackers to delete stolen data after a cyberattack that disrupted students during finals. The company received confirmation of data deletion from the hackers.