♟️ Inside a Dark Adtech Empire Fed by Fake CAPTCHAs ♟️
📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
Late last year, security researchers made a startling discovery Kremlinbacked disinformation campaigns were bypassing moderation on social media platforms by leveraging the same malicious advertising technology that powers a sprawling ecosystem of online hucksters and website hackers. A new report on the fallout from that investigation finds this dark ad tech industry is far more resilient and incestuous than previously known.📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
Krebs on Security
Inside a Dark Adtech Empire Fed by Fake CAPTCHAs
Late last year, security researchers made a startling discovery: Kremlin-backed disinformation campaigns were bypassing moderation on social media platforms by leveraging the same malicious advertising technology that powers a sprawling ecosystem of online…
🖋️ WordPress Sites Turned Weapon: How VexTrio and Affiliates Run a Global Scam Network 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
The threat actors behind the VexTrio Viper Traffic Distribution Service TDS have been linked to other TDS services like Help TDS and Disposable TDS, indicating that the sophisticated cybercriminal operation is a sprawling enterprise of its own that's designed to distribute malicious content. "VexTrio is a group of malicious adtech companies that distribute scams and harmful software via.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ New TokenBreak Attack Bypasses AI Moderation with Single-Character Text Changes 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity researchers have discovered a novel attack technique called TokenBreak that can be used to bypass a large language model's LLM safety and content moderation guardrails with just a single character change. "The TokenBreak attack targets a text classification model's tokenization strategy to induce false negatives, leaving end targets vulnerable to attacks that the implemented.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
👍1
🖋️ AI Agents Run on Secret Accounts — Learn How to Secure Them in This Webinar 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
AI is changing everything from how we code, to how we sell, to how we secure. But while most conversations focus on what AI can do, this one focuses on what AI can break if youre not paying attention. Behind every AI agent, chatbot, or automation script lies a growing number of nonhuman identities API keys, service accounts, OAuth tokens silently operating in the background. And heres.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data Without User Interaction 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
A novel attack technique named EchoLeak has been characterized as a "zeroclick" artificial intelligence AI vulnerability that allows bad actors to exfiltrate sensitive data from Microsoft 365 Copilot's context sans any user interaction. The criticalrated vulnerability has been assigned the CVE identifier CVE202532711 CVSS score 9.3. It requires no customer action and has been already.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Non-Human Identities: How to Address the Expanding Security Risk 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Human identities management and control is pretty well done with its set of dedicated tools, frameworks, and best practices. This is a very different world when it comes to Nonhuman identities also referred to as machine identities. GitGuardians endtoend NHI security platform is here to close the gap. Enterprises are Losing Track of Their Machine Identities Machine identitiesservice.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ ConnectWise to Rotate ScreenConnect Code Signing Certificates Due to Security Risks 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
ConnectWise has disclosed that it's planning to rotate the digital code signing certificates used to sign ScreenConnect, ConnectWise Automate, and ConnectWise remote monitoring and management RMM executables due to security concerns. The company said it's doing so "due to concerns raised by a thirdparty researcher about how ScreenConnect handled certain configuration data in earlier versions.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Over 80,000 Microsoft Entra ID Accounts Targeted Using Open-Source TeamFiltration Tool 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity researchers have uncovered a new account takeover ATO campaign that leverages an opensource penetration testing framework called TeamFiltration to breach Microsoft Entra ID formerly Azure Active Directory user accounts. The activity, codenamed UNKSneakyStrike by Proofpoint, has targeted over 80,000 user accounts across hundreds of organizations' cloud tenants since a surge in.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Former Black Basta Members Use Microsoft Teams and Python Scripts in 2025 Attacks 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Former members tied to the Black Basta ransomware operation have been observed sticking to their triedandtested approach of email bombing and Microsoft Teams phishing to establish persistent access to target networks. "Recently, attackers have introduced Python script execution alongside these techniques, using cURL requests to fetch and deploy malicious payloads," ReliaQuest said in a report.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ 295 Malicious IPs Launch Coordinated Brute-Force Attacks on Apache Tomcat Manager 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Threat intelligence firm GreyNoise has warned of a "coordinated bruteforce activity" targeting Apache Tomcat Manager interfaces. The company said it observed a surge in bruteforce and login attempts on June 5, 2025, an indication that they could be deliberate efforts to "identify and access exposed Tomcat services at scale." To that end, 295 unique IP addresses have been found to be engaged.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ INTERPOL Dismantles 20,000+ Malicious IPs Linked to 69 Malware Variants in Operation Secure 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
INTERPOL on Wednesday announced the dismantling of more than 20,000 malicious IP addresses or domains that have been linked to 69 informationstealing malware variants. The joint action, codenamed Operation Secure, took place between January and April 2025, and involved law enforcement agencies from 26 countries to identify servers, map physical networks, and execute targeted takedowns. "These.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Why DNS Security Is Your First Defense Against Cyber Attacks? 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
In todays cybersecurity landscape, much of the focus is placed on firewalls, antivirus software, and endpoint detection. While these tools are essential, one critical layer often goes overlooked the Domain Name System DNS. As the starting point of nearly every online interaction, DNS is not only foundational its increasingly a target. When left unsecured, it becomes a single point of.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ SinoTrack GPS Devices Vulnerable to Remote Vehicle Control via Default Passwords 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Two security vulnerabilities have been disclosed in SinoTrack GPS devices that could be exploited to control certain remote functions on connected vehicles and even track their locations. "Successful exploitation of these vulnerabilities could allow an attacker to access device profiles without authorization through the common web management interface," the U.S. Cybersecurity and Infrastructure.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ How to Build a Lean Security Model: 5 Lessons from River Island 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
In todays security landscape, budgets are tight, attack surfaces are sprawling, and new threats emerge daily. Maintaining a strong security posture under these circumstances without a large team or budget can be a real challenge. Yet lean security models are not only possible they can be highly effective. River Island, one of the UKs leading fashion retailers, offers a powerful.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Microsoft Patches 67 Vulnerabilities Including WEBDAV Zero-Day Exploited in the Wild 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Microsoft has released patches to fix 67 security flaws, including one zeroday bug in Web Distributed Authoring and Versioning WebDAV that it said has come under active exploitation in the wild. Of the 67 vulnerabilities, 11 are rated Critical and 56 are rated Important in severity. This includes 26 remote code execution flaws, 17 information disclosure flaws, and 14 privilege escalation.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 Palo Alto Networks Patches Series of Vulnerabilities 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
The cybersecurity provider also implemented recent fixes in Chromium that affected its Prisma Access Browser.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
🤯2
📔 NIST Publishes New Zero Trust Implementation Guidance 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
The new NIST guidance sets out 19 example implementations of zero trust using commercial, offtheshelf technologies.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
📔 Europol Says Criminal Demand for Data is “Skyrocketing” 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Europol warns of vicious circle of data breaches and cybercrime.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
📔 Phishing Alert as Erie Insurance Reveals Cyber “Event” 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Erie Insurance reveals suspected network breach and ongoing outage.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Phishing Alert as Erie Insurance Reveals Cyber “Event”
Erie Insurance reveals suspected network breach and ongoing outage
📔 Congress Introduces Bill to Strengthen Healthcare Cybersecurity 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
The legislation aims to expand the federal governments role in helping healthcare providers protect and respond to cyberattacks.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Congress Introduces Bill to Strengthen Healthcare Cybersecurity
The legislation aims to expand the federal government’s role in helping healthcare providers protect and respond to cyber-attacks
📔 20,000 Asian IPs and Domains Dismantled in Infostealer Crackdown 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Interpolcoordinated Operation Secure led to 32 arrests, including the suspected ringleader of a cybercriminal organization.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
20,000 Asian IPs and Domains Dismantled in Infostealer Crackdown
Interpol-coordinated Operation Secure led to 32 arrests, including the suspected ringleader of a cybercriminal organization