📢 'Payroll Pirates' target US universities, Microsoft warns 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
Group uses simple but effective tactics to divert staff salaries to themselves.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
IT Pro
'Payroll Pirates' target US universities, Microsoft warns
Group uses simple but effective tactics to divert staff salaries to themselves
📢 Researchers sound alarm over AI hardware vulnerabilities that expose training data 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
Hackers can abuse flaws in AI accelerators to break AI privacy and a reliable fix could be years away.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
IT Pro
Researchers sound alarm over AI hardware vulnerabilities that expose training data
Hackers can abuse flaws in AI accelerators to break AI privacy – and a reliable fix could be years away
🖋️ Stealit Malware Abuses Node.js Single Executable Feature via Game and VPN Installers 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity researchers have disclosed details of an active malware campaign called Stealit that has leveraged Node.js' Single Executable Application SEA feature as a way to distribute its payloads. According to Fortinet FortiGuard Labs, select iterations have also employed the opensource Electron framework to deliver the malware. It's assessed that the malware is being propagated through.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Microsoft Warns of ‘Payroll Pirates’ Hijacking HR SaaS Accounts to Steal Employee Salaries 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
A threat actor known as Storm2657 has been observed hijacking employee accounts with the end goal of diverting salary payments to attackercontrolled accounts. "Storm2657 is actively targeting a range of U.S.based organizations, particularly employees in sectors like higher education, to gain access to thirdparty human resources HR software as a service SaaS platforms like Workday," the.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
♟️ DDoS Botnet Aisuru Blankets US ISPs in Record DDoS ♟️
📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
The world's largest and most disruptive botnet is now drawing a majority of its firepower from compromised InternetofThings IoT devices hosted on U.S. Internet providers like ATT, Comcast and Verizon, new evidence suggests. Experts say the heavy concentration of infected devices at U.S. providers is complicating efforts to limit collateral damage from the botnet's attacks, which shattered previous records this week with a brief traffic flood that clocked in at nearly 30 trillion bits of data per second.📖 Read more.
🔗 Via "Krebs on Security"
----------
👁️ Seen on @cibsecurity
Krebs on Security
DDoS Botnet Aisuru Blankets US ISPs in Record DDoS
The world's largest and most disruptive botnet is now drawing a majority of its firepower from compromised Internet-of-Things (IoT) devices hosted on U.S. Internet providers like AT&T, Comcast and Verizon, new evidence suggests. Experts say the heavy concentration…
🖋️ New Oracle E-Business Suite Bug Could Let Hackers Access Data Without Login 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Oracle on Saturday issued a security alert warning of a fresh security flaw impacting its EBusiness Suite that it said could allow unauthorized access to sensitive data. The vulnerability, tracked as CVE202561884, carries a CVSS score of 7.5, indicating high severity. It affects versions from 12.2.3 through 12.2.14. "Easily exploitable vulnerability allows an unauthenticated attacker with.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
❤1
🖋️ Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 Accounts 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity company Huntress on Friday warned of "widespread compromise" of SonicWall SSL VPN devices to access multiple customer environments. "Threat actors are authenticating into multiple accounts rapidly across compromised devices," it said. "The speed and scale of these attacks imply that the attackers appear to control valid credentials rather than bruteforcing." A significant chunk of.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Hackers Turn Velociraptor DFIR Tool Into Weapon in LockBit Ransomware Attacks 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Threat actors are abusing Velociraptor, an opensource digital forensics and incident response DFIR tool, in connection with ransomware attacks likely orchestrated by Storm2603 aka CLCRI1040 or Gold Salem, which is known for deploying the Warlock and LockBit ransomware. The threat actor's use of the security utility was documented by Sophos last month. It's assessed that the attackers.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🌊 Andesite vs. Swimlane: The 2025 AI SOC Dilemma 🌊
📖 Read more.
🔗 Via "UnderDefense"
----------
👁️ Seen on @cibsecurity
This guide cuts through the noise when Andesite and Swimlane land on the same shortlist. Its not what do they do?, youve seen the slides. Its what changes day one?, The post Andesite vs. Swimlane The 2025 AI SOC Dilemma appeared first on UnderDefense.📖 Read more.
🔗 Via "UnderDefense"
----------
👁️ Seen on @cibsecurity
UnderDefense
Andesite vs. Swimlane: AI SOC Showdown for 2025
Compare Andesite vs. Swimlane in the 2025 AI SOC race. Explore costs, failure modes, and how each fits your stack.
🌊 9 ReliaQuest Alternatives for AI‑Driven SOC in 2025 🌊
📖 Read more.
🔗 Via "UnderDefense"
----------
👁️ Seen on @cibsecurity
This guide breaks down the top ReliaQuest alternatives. Below are 9 AI SOC platforms that offer a path forward whether you want true MDR, stronger automation, or smarter detection coverage. For The post 9 ReliaQuest Alternatives for AIDriven SOC in 2025 appeared first on UnderDefense.📖 Read more.
🔗 Via "UnderDefense"
----------
👁️ Seen on @cibsecurity
UnderDefense
9 Best ReliaQuest Alternatives for AI SOC in 2025
Evaluating ReliaQuest? We compare 9 credible alternatives. Understand strengths, blind spots, and cost realities.
🌊 Sophos vs. Cisco-Splunk Ecosystem (2025): XDR Copilot vs. Agentic SOC 🌊
📖 Read more.
🔗 Via "UnderDefense"
----------
👁️ Seen on @cibsecurity
Sophos vs. CiscoSplunk is a clash of AI philosophies in SecOps. Sophos drops an AI copilot into your XDR, speeding human judgment where investigations actually happen. Cisco and Splunk wire The post Sophos vs. CiscoSplunk Ecosystem 2025 XDR Copilot vs. Agentic SOC appeared first on UnderDefense.📖 Read more.
🔗 Via "UnderDefense"
----------
👁️ Seen on @cibsecurity
UnderDefense
Sophos vs. Cisco-Splunk (2025): AI Copilot vs. Agentic SOC
Compare Sophos vs. Cisco‑Splunk 2025. See how AI copilots and agentic SOCs reshape XDR, automation, and SecOps outcomes.
🖋️ New Rust-Based Malware "ChaosBot" Uses Discord Channels to Control Victims' PCs 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity researchers have disclosed details of a new Rustbased backdoor called ChaosBot that can allow operators to conduct reconnaissance and execute arbitrary commands on compromised hosts. "Threat actors leveraged compromised credentials that mapped to both Cisco VPN and an overprivileged Active Directory account named, 'serviceaccount,'" eSentire said in a technical report published.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Astaroth Banking Trojan Abuses GitHub to Remain Operational After Takedowns 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity researchers are calling attention to a new campaign that delivers the Astaroth banking trojan that employs GitHub as a backbone for its operations to stay resilient in the face of infrastructure takedowns. "Instead of relying solely on traditional commandandcontrol C2 servers that can be taken down, these attackers are leveraging GitHub repositories to host malware.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 FBI and French Police Shutter BreachForums Domain Again 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
The infamous BreachForums site has been taken offline again to disrupt Scattered Lapsus Hunters.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
FBI and French Police Shutter BreachForums Domain Again
The infamous BreachForums site has been taken offline again to disrupt Scattered Lapsus$ Hunters
📢 Third time lucky? The FBI just took down BreachForums, again 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
The hacking forum is down for now, but the group behind it, Scattered Lapsus Hunters, isn't going to stop extorting victims of the Salesforce breach.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
IT Pro
Third time lucky? The FBI just took down BreachForums, again
The hacking forum is down for now, but the group behind it, Scattered Lapsus$ Hunters, isn't going to stop extorting victims of the Salesforce breach
📢 Microsoft says 71% of workers have used unapproved AI tools at work – and it’s a trend that enterprises need to crack down on 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
Shadow AI is by no means a new trend, but its creating significant risks for enterprises.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
IT Pro
Microsoft says 71% of workers have used unapproved AI tools at work – and it’s a trend that enterprises need to crack down on
Shadow AI is by no means a new trend, but it’s creating significant risks for enterprises
🖋️ ⚡ Weekly Recap: WhatsApp Worm, Critical CVEs, Oracle 0-Day, Ransomware Cartel & More 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Every week, the cyber world reminds us that silence doesnt mean safety. Attacks often begin quietly one unpatched flaw, one overlooked credential, one backup left unencrypted. By the time alarms sound, the damage is done. This weeks edition looks at how attackers are changing the game linking different flaws, working together across borders, and even turning trusted tools into weapons.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Why Unmonitored JavaScript Is Your Biggest Holiday Security Risk 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Think your WAF has you covered? Think again. This holiday season, unmonitored JavaScript is a critical oversight allowing attackers to steal payment data while your WAF and intrusion detection systems see nothing. With the 2025 shopping season weeks away, visibility gaps must close now. Get the complete Holiday Season Security Playbook here. Bottom Line Up Front The 2024 holiday season saw major.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Researchers Warn RondoDox Botnet is Weaponizing Over 50 Flaws Across 30+ Vendors 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Malware campaigns distributing the RondoDox botnet have expanded their targeting focus to exploit more than 50 vulnerabilities across over 30 vendors. The activity, described as akin to an "exploit shotgun" approach, has singled out a wide range of internetexposed infrastructure, including routers, digital video recorders DVRs, network video recorders NVRs, CCTV systems, web servers, and.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ Microsoft Locks Down IE Mode After Hackers Turned Legacy Feature Into Backdoor 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Microsoft said it has revamped the Internet Explorer IE mode in its Edge browser after receiving "credible reports" in August 2025 that unknown threat actors were abusing the backward compatibility feature to gain unauthorized access to users' devices. "Threat actors were leveraging basic social engineering techniques alongside unpatched 0day exploits in Internet Explorer's JavaScript.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 New Stealit Malware Campaign Spreads via VPN and Game Installer Apps 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
A new campaign distributing the Stealit infostealer employs previously unknown malware delivery techniques and infrastructure.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
New Stealit Malware Campaign Spreads via VPN and Game Installer Apps
A new campaign distributing the Stealit infostealer employs previously unknown malware delivery techniques and infrastructure
❤1