News

News

Malware devs abuse Anthropic’s Claude AI to build ransomware

Anthropic's Claude Code large language model has been abused by threat actors who used it in data extortion campaigns an...
News

Passwordstate dev urges users to patch auth bypass vulnerability

Click Studios, the company behind the Passwordstate enterprise-grade password manager, has warned customers to patch a h...
News

Police seize VerifTools fake ID marketplace servers, domains

The FBI and the Dutch Police have shut down the VerifTools marketplace for fraudulent identity documents after seizing s...
News

Mustang Panda hackers hijack network captive portals in diplomat attacks

Update: Story and title updated as it incorrectly attributed the activity to Silk Typhoon, instead of Mustang Panda. Sta...
News

MATLAB dev says ransomware gang stole data of 10,000 people

MathWorks, a leading developer of mathematical simulation and computing software, revealed that a ransomware gang stole ...
News

TransUnion suffers data breach impacting over 4.4 million people

Update: Story updated with confirmation that this was another Salesforce data theft attack and the types of data stolen....
News

Shadow IT Is Expanding Your Attack Surface. Here’s Proof

Shadow IT - the systems your security team doesn’t know about - is a persistent challenge. Policies may ban them, but un...
News

Storm-0501 hackers shift to ransomware attacks in the cloud

Microsoft warns that a threat actor tracked as Storm-0501 has evolved its operations, shifting away from encrypting devi...
News

Experimental PromptLock ransomware uses AI to encrypt, steal data

Threat researchers discovered the first AI-powered ransomware, called PromptLock, that uses Lua scripts to steal and enc...
News

FreePBX servers hacked via zero-day, emergency fix released

The Sangoma FreePBX Security Team is warning about an actively exploited FreePBX zero-day vulnerability that impacts sys...