Tag
A security researcher who infiltrated North Korean hacking systems for nearly two years reveals they breached hundreds of networks worldwide, impacting over 1,600 companies across 57 countries, with findings presented at Black Hat.
Kaspersky analyzes how phishers are increasingly abusing legitimate cloud platforms like Cloudflare Workers, Vercel, and GitHub Pages to host phishing pages and bypass MFA via adversary-in-the-middle attacks.
OpenAI reports disrupting a Cambodia-based scam operation that used ChatGPT to support investment, romance, gambling, and law enforcement impersonation scams, and shared threat signals with industry partners.
Taranis AI is an open-source OSINT tool that uses AI and NLP to gather, enrich, and structure unstructured news from multiple sources into publishable intelligence reports.
Analysis of a month-long TFTP honeypot operation reveals regular scans from seven infosec companies and occasional cryptic probes.
An investigation into the ransomware group 'The Gentlemen' reveals clues pointing to the real-life identity of its administrator, known as Hastalamuerte/Zeta88, an Izhevsk-based Russian speaker who recruits affiliates with a 90/10 ransom split.
Bhutan's Computer Incident Response Team (BtCIRT) has been onboarded to Have I Been Pwned's free government service, becoming the 45th government to join. This allows them to monitor Bhutanese government domains for compromised credentials and data breaches.
Security researchers discovered Fast16, a pre-Stuxnet sabotage framework from around 2005 that targeted nuclear weapons simulations by hooking into LS-DYNA and AUTODYN software to tamper with high-explosive detonation simulations.
Whisper Internet Infra AI Context is a free MCP tool providing AI agents with live access to BGP, DNS, and threat graph data for enhanced security analysis.
Google warns that cybercriminals and nation-state actors are increasingly using AI to rapidly develop sophisticated hacking tools, including the first confirmed AI-generated zero-day exploit. The report highlights how AI lowers the technical barrier for cyberattacks, enabling even low-skilled hackers to execute complex operations.
Google's Threat Intelligence Group reports its first discovery of an AI-generated zero-day exploit intended for mass exploitation, highlighting a growing trend of adversaries using AI for malware development, defense evasion, and autonomous cyberattacks.
Google reports that criminal hackers utilized artificial intelligence to discover a critical software vulnerability, prompting the tech giant to intervene and mitigate the threat before mass exploitation could occur.
Troy Hunt's weekly update discusses how ShinyHunters uses social engineering and vishing to breach major brands, with insights from Mandiant.
A foundational study on applying stylometric authorship attribution to threat intelligence, using Japanese Rakuten reviews to compare TF-IDF+LR, BERT embedding, BERT fine-tuning, and metric learning methods. BERT-FT performed best overall, but TF-IDF+LR proved more stable and efficient when scaling to hundreds of authors.
OpenAI publishes a threat intelligence report detailing efforts to disrupt over 20 deceptive AI operations globally, with a focus on state-linked actors and influence campaigns particularly concerning given global elections.
OpenAI and Microsoft disrupted five state-affiliated threat actors (from China, Iran, North Korea, and Russia) who were misusing AI services for phishing campaigns, code analysis, and information gathering. The actors were identified and their accounts terminated, with findings showing limited incremental capabilities of GPT-4 for malicious cybersecurity tasks beyond existing tools.
ShadowBroker is an open-source decentralized intelligence platform that aggregates 60+ live OSINT feeds into a single map interface for real-time global threat monitoring and analysis.