30+ min ago   (770+ words) A number of Vermont school districts were hit with an insidious phishing scheme this summer, following a pattern of cybercriminals attacking crucial institutions in rural communities. “This is a really common hacking methodology, unfortunately,” said Denise Reilly-Hughes, secretary of the…...

32+ min ago   (568+ words) How Anthropic plans to watermark Claude's AI-generated text Hackers exploit macOS Screen Sharing flaw to deploy Monero miner RingCentral data breach exposed info of 1.6 million accounts Data analyst sent to prison for stealing data, extorting employer Healthtech firm CareCloud data…...

7+ hour, 29+ min ago   (179+ words) Canada's police leaders are throwing their support behind a federal bill aimed at giving investigators faster access to digital evidence, but they say one gap could still let serious crime slip through the cracks: encrypted data. WIN a trip to…...

2+ hour, 8+ min ago   (97+ words) SC Media Medusa ransomware group attacked more than 500 victims since 2021 - Fortinet EMS SQL injection vulnerability CVE-2023-48788 CVSS 9.8. - Focus on security hygiene: Medusa primarily weaponizes well-known, patchable vulnerabilities on internet-facing systems rather than relying strictly on complex zero-days. - Keep admins accountable:…...

5+ hour, 39+ min ago   (335+ words) A malware-as-a-service (MaaS) campaign has combined ClickFix social engineering with the ErrTraffic delivery service and Cruciferra loader, giving attackers a way to distribute malware while disabling endpoint security processes. In a new advisory published earlier today, eSentire’s Threat Response Unit…...

3+ hour, 12+ min ago   (397+ words) A misconfigured server exposed a fraud operation armed with fake Trezor and Ledger apps, nearly 900,000 phone numbers, and AI-assisted code development A single misconfigured web server just pulled back the curtain on one of the more methodical crypto fraud operations…...

3+ hour, 59+ min ago   (340+ words) Delta Air Lines was targeted in a Wi-Fi phishing attack on a flight from Las Vegas to Atlanta earlier this month after an unauthorised network appeared on board. The incident occurred on August 10, after passengers were leaving Las Vegas following…...

4+ hour, 17+ min ago   (342+ words) A large-scale malware operation dubbed StopAndProtect uses thousands of compromised WordPress websites to distribute malware, issue commands, and store data stolen from infected computers. The campaign combines ransomware, credential theft, surveillance, lateral movement, and hands-on data collection, with logs revealing…...

5+ hour, 49+ min ago   (678+ words) Hackers are pairing AI-generated phone calls with fake banking pages to take over customer accounts, even when multi-factor authentication is enabled. The campaign, tracked as Balonx Sistema, gives criminals a live view of a victim’s phishing session and lets them…...

5+ hour, 34+ min ago   (602+ words) A China-nexus cyber espionage campaign is using a convincing visual trick to reach Myanmar government and technology personnel. The attackers present a virtual hard disk, or VHD, as an ordinary JPEG image, betting that recipients will not question a familiar…...