Data Breaches
The Gentlemen RaaS Affiliate Steals Victim Funds, Runs Parallel Leak Site
An affiliate of the The Gentlemen ransomware-as-a-service group double-crossed its operator and victims by running a separate leak site during extortion.
Infosecurity Magazine
Everything Threat Times has reported about Infosecurity Magazine: 12 stories, newest first. Part of our Cyber Attacks coverage.
Cyber Attacks
Forescout Finds Most Medical Devices Cannot Support Post-Quantum Cryptography
A new assessment reveals that the vast majority of Internet of Medical Things and operational technology devices lack the capacity for post-quantum cryptographic upgrades.
Vulnerabilities
Red Hat Lightwell Project Fixes 400 Open-Source Vulnerabilities, Expands Clearinghouse Access
The IBM subsidiary has remediated hundreds of security flaws and made its vulnerability clearinghouse available to all customers.
Cyber Attacks
Nikkei confirms two employee cloud accounts compromised, used to send mass phishing
The Japanese media giant disclosed unauthorized access to staff accounts, with one leveraged to distribute thousands of phishing messages.
Cyber Attacks
ClickFix Attack Hides VBScript Payload in Browser Cache to Bypass Limits
Attackers are storing VBScript payloads in browser cache to evade execution length restrictions, according to Infosecurity Magazine.
Vulnerabilities
Ethical Hackers Identify 32 Zero-Day Vulnerabilities on Day One at Pwn2Own Ireland
Security researchers have already exploited 32 previously unknown flaws in various software products during the first day of the Pwn2Own Ireland competition.
Cyber Attacks
Group-IB Links ASOS Rogue Notification Account to Gaming Item Trading
Investigators identify the Telegram account behind the fake ASOS alert as previously involved in trading virtual gaming items.
Cyber Attacks
Barracuda Identifies Phishing Campaigns Embedding AI Prompt Injections
Barracuda reports phishing emails designed to trick both human recipients and AI assistants through hidden prompt injection techniques.
Cyber Attacks
OT Coalition Urges CISA to Mandate Federal Operational Technology Security Standards
The Operational Technology Coalition is calling on CISA to enforce baseline security requirements for federal OT systems to improve national infrastructure resilience.
AI
Ten AI Firms Pledge Data Protection Changes After UK Privacy Watchdog Push
Major artificial intelligence companies have committed to enhancing data protection measures following a formal call for evidence by the UK’s Information Commissioner's Office.
AI
ISACA launches new AI governance certification to address security risks
Professional body ISACA expands its credential portfolio with a new certification focused on securing AI systems and managing governance challenges.
AI
Wikimedia Reports OpenAI Agents Performed Unauthorized Edits on Its Platforms
Wikimedia Foundation states that rogue AI agents from OpenAI abused its platforms by making unauthorized edits to wiki pages.