🖋️ Storm-0501 Exploits Entra ID to Exfiltrate and Delete Azure Data in Hybrid Cloud Attacks 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
The financially motivated threat actor known as Storm0501 has been observed refining its tactics to conduct data exfiltration and extortion attacks targeting cloud environments. "Unlike traditional onpremises ransomware, where the threat actor typically deploys malware to encrypt critical files across endpoints within the compromised network and then negotiates for a decryption key,.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Someone Created the First AI-Powered Ransomware Using OpenAI's gpt-oss:20b Model 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity company ESET has disclosed that it discovered an artificial intelligence AIpowered ransomware variant codenamed PromptLock. Written in Golang, the newly identified strain uses the gptoss20b model from OpenAI locally via the Ollama API to generate malicious Lua scripts in realtime. The openweight language model was released by OpenAI earlier this month. "PromptLock.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Someone Created the First AI-Powered Ransomware Using OpenAI's gpt-oss:20b Model 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity company ESET has disclosed that it discovered an artificial intelligence AIpowered ransomware variant codenamed PromptLock. Written in Golang, the newly identified strain uses the gptoss20b model from OpenAI locally via the Ollama API to generate malicious Lua scripts in realtime. The openweight language model was released by OpenAI earlier this month. "PromptLock.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Someone Created the First AI-Powered Ransomware Using OpenAI's gpt-oss:20b Model 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity company ESET has disclosed that it discovered an artificial intelligence AIpowered ransomware variant codenamed PromptLock. Written in Golang, the newly identified strain uses the gptoss20b model from OpenAI locally via the Ollama API to generate malicious Lua scripts in realtime. The openweight language model was released by OpenAI earlier this month. "PromptLock.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ U.S. Treasury Sanctions DPRK IT-Worker Scheme, Exposing $600K Crypto Transfers and $1M+ Profits 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
The U.S. Department of the Treasury's Office of Foreign Assets Control OFAC announced a fresh round of sanctions against two individuals and two entities for their role in the North Korean remote information technology IT worker scheme to generate illicit revenue for the regime's weapons of mass destruction and ballistic missile programs. "The North Korean regime continues to target American.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Storm-0501 Exploits Entra ID to Exfiltrate and Delete Azure Data in Hybrid Cloud Attacks 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
The financially motivated threat actor known as Storm0501 has been observed refining its tactics to conduct data exfiltration and extortion attacks targeting cloud environments. "Unlike traditional onpremises ransomware, where the threat actor typically deploys malware to encrypt critical files across endpoints within the compromised network and then negotiates for a decryption key,.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Someone Created the First AI-Powered Ransomware Using OpenAI's gpt-oss:20b Model 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity company ESET has disclosed that it discovered an artificial intelligence AIpowered ransomware variant codenamed PromptLock. Written in Golang, the newly identified strain uses the gptoss20b model from OpenAI locally via the Ollama API to generate malicious Lua scripts in realtime. The openweight language model was released by OpenAI earlier this month. "PromptLock.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
♟️ Affiliates Flock to ‘Soulless’ Scam Gambling Machine ♟️
📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
Last month, KrebsOnSecurity tracked the sudden emergence of hundreds of polished online gaming and wagering websites that lure people with free credits and eventually abscond with any cryptocurrency funds deposited by players. We've since learned that these scam gambling sites have proliferated thanks to a new Russian affiliate program called "Gambler Panel" that bills itself as a "soulless project that is made for profit.".📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
Krebs on Security
Affiliates Flock to ‘Soulless’ Scam Gambling Machine
Last month, KrebsOnSecurity tracked the sudden emergence of hundreds of polished online gaming and wagering websites that lure people with free credits and eventually abscond with any cryptocurrency funds deposited by players. We've since learned that these…
🖋️ Researchers Find VS Code Flaw Allowing Attackers to Republish Deleted Extensions Under Same Names 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity researchers have discovered a loophole in the Visual Studio Code Marketplace that allows threat actors to reuse names of previously removed extensions. Software supply chain security outfit ReversingLabs said it made the discovery after it identified a malicious extension named "ahbanC.shiba" that functioned similarly to two other extensions ahban.shiba and ahban.cychelloworld .📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 Salesloft Attacks Target Google Workspace 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Adversaries targeting the Salesloft Drift application integration with Salesforce have also compromised Google Workspace accounts.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Salesloft Attacks Target Google Workspace
Adversaries targeting the Salesloft Drift application integration with Salesforce have also compromised Google Workspace accounts
🦿 Build Job-Ready IT and Cybersecurity Skills with Hands-On Labs 🦿
📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
Get lifetime access to The 2025 Complete Defensive Cyber Security Bundle for 39.99 reg. 240.📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
TechRepublic
Build Job-Ready IT and Cybersecurity Skills with Hands-On Labs
Get lifetime access to The 2025 Complete Defensive Cyber Security Bundle for $39.99 (reg. $240).
📢 Ransomware attack on IT supplier disrupts hundreds of Swedish municipalities 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
The attack on IT systems supplier Miljdata has impacted public sector services across the country.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
IT Pro
Ransomware attack on IT supplier disrupts hundreds of Swedish municipalities
The attack on IT systems supplier Miljödata has impacted public sector services across the country
📢 Ransomware attack on IT supplier disrupts hundreds of Swedish municipalities 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
The attack on IT systems supplier Miljdata has impacted public sector services across the country.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
IT Pro
Ransomware attack on IT supplier disrupts hundreds of Swedish municipalities
The attack on IT systems supplier Miljödata has impacted public sector services across the country
📔 WhatsApp Patches Zero-Day, Zero-Click Flaw 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
WhatsApp has fixed a zeroday vulnerability linked to a sophisticated cyberattack.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
WhatsApp Patches Zero-Day, Zero-Click Flaw
WhatsApp has fixed a zero-day vulnerability linked to a sophisticated cyber-attack
🦅 Supply Chain Attacks Have Doubled. What’s Driving the Increase? 🦅
📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
supply chain attacks " dataimagecaption"" datamediumfile"httpscyble.comwpcontentuploads202509supplychainattacks300x150.webp" datalargefile"httpscyble.comwpcontentuploads202509supplychainattacks.webp" title"Supply Chain Attacks Have Doubled. Whats Driving the Increase? 1" Software supply chain attacks have been occurring at twice their longterm average in recent months and have shown no sign of slowing down. The uptick in supply chain attacks began in April 2025, when Cyble dark web researchers observed claims of 31 such attacks. Since then, cyberattacks with supply chain implications have averaged 26 a month, twice the rate seen from early 2024 through March 2025 chart below. Cybles most recent threat landscape report registration required documented 30 supply chain incidents...📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
Cyble
Supply Chain Attacks Surge In 2025: Double The Usual Rate
Supply chain attacks have doubled since April 2025, targeting IT and tech firms. Ransomware, data theft, and zero-day exploits drive the ongoing surge.
📢 Ransomware attack on IT supplier disrupts hundreds of Swedish municipalities 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
The attack on IT systems supplier Miljdata has impacted public sector services across the country.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
IT Pro
Ransomware attack on IT supplier disrupts hundreds of Swedish municipalities
The attack on IT systems supplier Miljödata has impacted public sector services across the country
🦿 Build Job-Ready IT and Cybersecurity Skills with Hands-On Labs 🦿
📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
Get lifetime access to The 2025 Complete Defensive Cyber Security Bundle for 39.99 reg. 240.📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
TechRepublic
Build Job-Ready IT and Cybersecurity Skills with Hands-On Labs
Get lifetime access to The 2025 Complete Defensive Cyber Security Bundle for $39.99 (reg. $240).
🦿 Build Job-Ready IT and Cybersecurity Skills with Hands-On Labs 🦿
📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
Get lifetime access to The 2025 Complete Defensive Cyber Security Bundle for 39.99 reg. 240.📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
TechRepublic
Build Job-Ready IT and Cybersecurity Skills with Hands-On Labs
Get lifetime access to The 2025 Complete Defensive Cyber Security Bundle for $39.99 (reg. $240).
🦅 Supply Chain Attacks Have Doubled. What’s Driving the Increase? 🦅
📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
supply chain attacks " dataimagecaption"" datamediumfile"httpscyble.comwpcontentuploads202509supplychainattacks300x150.webp" datalargefile"httpscyble.comwpcontentuploads202509supplychainattacks.webp" title"Supply Chain Attacks Have Doubled. Whats Driving the Increase? 1" Software supply chain attacks have been occurring at twice their longterm average in recent months and have shown no sign of slowing down. The uptick in supply chain attacks began in April 2025, when Cyble dark web researchers observed claims of 31 such attacks. Since then, cyberattacks with supply chain implications have averaged 26 a month, twice the rate seen from early 2024 through March 2025 chart below. Cybles most recent threat landscape report registration required documented 30 supply chain incidents...📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
Cyble
Supply Chain Attacks Surge In 2025: Double The Usual Rate
Supply chain attacks have doubled since April 2025, targeting IT and tech firms. Ransomware, data theft, and zero-day exploits drive the ongoing surge.
🦅 Supply Chain Attacks Have Doubled. What’s Driving the Increase? 🦅
📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
supply chain attacks " dataimagecaption"" datamediumfile"httpscyble.comwpcontentuploads202509supplychainattacks300x150.webp" datalargefile"httpscyble.comwpcontentuploads202509supplychainattacks.webp" title"Supply Chain Attacks Have Doubled. Whats Driving the Increase? 1" Software supply chain attacks have been occurring at twice their longterm average in recent months and have shown no sign of slowing down. The uptick in supply chain attacks began in April 2025, when Cyble dark web researchers observed claims of 31 such attacks. Since then, cyberattacks with supply chain implications have averaged 26 a month, twice the rate seen from early 2024 through March 2025 chart below. Cybles most recent threat landscape report registration required documented 30 supply chain incidents...📖 Read more.
🔗 Via "CYBLE"
----------
👁️ Seen on @cibsecurity
Cyble
Supply Chain Attacks Surge In 2025: Double The Usual Rate
Supply chain attacks have doubled since April 2025, targeting IT and tech firms. Ransomware, data theft, and zero-day exploits drive the ongoing surge.
❤1
🖋️ ScarCruft Uses RokRAT Malware in Operation HanKook Phantom Targeting South Korean Academics 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity researchers have discovered a new phishing campaign undertaken by the North Korealinked hacking group called ScarCruft aka APT37 to deliver a malware known as RokRAT. The activity has been codenamed Operation HanKook Phantom by Seqrite Labs, stating the attacks appear to target individuals associated with the National Intelligence Research Association, including academic figures.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
❤1