A meticulous attack targeted prominent British expert on Russian information operations Keir Giles. The threat actor leveraged App-Specific Passwords to bypass multi-factor authentication. The attack was linked to a Russian…

A covert campaign abuses Cloudflare's temporary subdomains to host and deliver malicious payloads. Attackers distribute RATs hosted on attacker-controlled Cloudflare Tunnel subdomains.  The batch, VBScript, and Python infection stages ultimately…

Security researchers identified new WormGPT variants that operate via Telegram channels. These rely on advanced LLMs like Grok and Mixtral for credential harvesting and phishing email generation. A growing trend…

A self-proclaimed hacktivist group that supports Israel announced an alleged breach of an Iranian bank. The actors said they destroyed Bank Sepah’s data due to the institution reportedly funding Iran’s…

PLA researchers and Chinese defense industries are expanding generative AI use in the military sector. A Chinese defense contractor confirmed providing a DeepSeek-based OSINT model to the PLA. They focus…

Viasat is one of the targets compromised in last year’s broad cyber operations attributed to Salt Typhoon. The China-affiliated threat actor breached the satellite communications company via one compromised device.…

A security researcher’s report says Kia Soluto, Rio, and Picanto in Ecuador are exposed to theft risks. The report details a critical security flaw in the cars’ keyless entry systems…