Bitdefender linked a multi-wave intrusion against an Azerbaijani oil and gas company to FamousSparrow, a China-nexus threat actor, with repeated exploitation of the same Microsoft Exchange Server entry point. The campaign used changing payloads including Deed RAT and TernDoor, alongside web shells, lateral movement, and refined DLL side-loading to maintain persistent…
Category: Cyber Security News
The leaked internal chats of The Gentlemen RaaS group reveal that the gang heavily depends on infostealer credential logs and tools like Snusbase to gain initial access to corporate networks. Checkpoint Research and Hudson Rock show that this credential-driven approach is now a major trend, with groups like the Coinbase Cartel and malware families such as RedLine, Lumma, and Vidar enabling silent intrusions. #TheGentlemen #Snusbase #CheckpointResearch #CoinbaseCartel #RedLine #Lumma #Vidar
AI-generated fraud is escalating quickly, with fraudsters using generative AI to scale impersonation, deepfakes, and synthetic identities faster than traditional defenses can respond. Enterprise leaders, especially in critical infrastructure, must adopt agile identity verification tools and vendor strategies that can update within days to keep pace with threats like Incode and other advanced fraud techniques. #Incode #Deloitte #Experian #NIST #Gartner
The Trump administration released a DOJ legal opinion claiming federal authority to collect nationwide voter data and justify broad oversight of state voter rolls. Courts and election officials have repeatedly rejected this effort, saying the administration is misreading federal election laws and overstepping its role. #DepartmentofJustice #CivilRightsAct #HelpAmericaVoteAct #NationalVoterRegistrationAct #VotingRightsAct
A researcher known as Chaotic Eclipse or Nightmare Eclipse has released proof-of-concept exploits for two unpatched Windows flaws, YellowKey and GreenPlasma, affecting BitLocker and privilege escalation. The leaks follow earlier disclosures of BlueHammer and RedSun, and the researcher says more Windows exploit releases may come before the next Patch Tuesday. #YellowKey #GreenPlasma #BlueHammer #RedSun #ChaoticEclipse #NightmareEclipse
A critical Exim flaw tracked as CVE-2026-45185 can let an unauthenticated remote attacker achieve code execution on affected mail servers using GnuTLS and BDAT chunked SMTP traffic. Exim released version 4.99.3 to fix the issue, and users on impacted Ubuntu and Debian-based systems should update immediately. #Exim #CVE-2026-45185 #GnuTLS #Ubuntu #Debian
Microsoft has introduced MDASH, a multi-model AI system that uses more than 100 specialized agents to discover, validate, and prove vulnerabilities in complex codebases like Windows. The system has already helped uncover 16 flaws fixed in the latest Patch Tuesday release, including CVE-2026-33824 and CVE-2026-33827. #Microsoft #MDASH #CVE-2026-33824 #CVE-2026-33827 #Windows…
Foxconn confirmed that some of its North American factories were hit by a cyberattack, and said its response measures helped keep production and deliveries moving. The Nitrogen ransomware group claims responsibility and says it stole 8TB of data tied to major customers including Apple, Intel, Google, Dell, and Nvidia. #Foxconn #Nitrogen…
OpenAI has launched Daybreak, a cybersecurity initiative that pairs its large language models with the Codex agentic framework to help organizations find, patch, and validate software vulnerabilities across the development lifecycle. The program uses tiered access controls through GPT-5.5, GPT-5.5 with Trusted Access for Cyber, and GPT-5.5-Cyber, while competing with Anthropic’s Project Glasswing and Claude Mythos Preview. #Daybreak #GPT55 #TrustedAccessforCyber #GPT55Cyber #ProjectGlasswing #ClaudeMythosPreview
Microsoft fixed a Windows Autopatch issue that pushed restricted driver updates to some managed Windows devices in the European Union. The bug affected limited Windows 11 client versions and could cause unexpected reboots or system failures, but Microsoft says the service-side fix requires no customer action. #WindowsAutopatch #WindowsUpdate #Microsoft #Windows11
Microsoft has fixed a BitLocker recovery issue affecting some Windows 11 25H2 devices after the April 2026 security updates, while Windows 10 and Windows Server systems still need a future patch. The problem is tied to certain TPM validation and BitLocker Group Policy settings, and admins are advised to adjust those settings before deploying the updates. #Microsoft #Windows11 #BitLocker #KB5089549 #KB5083769
Modern cyberattacks are now built to evade defenses, disrupt operations, and slow recovery, making prevention alone insufficient for many organizations. This webinar from BleepingComputer and Kaseya will explore how AI-driven phishing, SaaS abuse, and business email compromise require stronger backup, recovery, and cyber resilience planning. #BleepingComputer #Kaseya #AustinO’Saben #AdamMarget #SaaS
This webinar focuses on how cyber-physical systems security teams can translate technical risk into financial terms using ROSI, especially to justify investments beyond pilot projects. It also highlights the business value of OT security by reducing downtime, avoiding fines, preventing equipment damage, and improving asset management for Claroty. #Claroty #SecurityWeek…
The article describes the “Mythos Moment” as the point where AI-assisted attacks outpaced human security, forcing defenders to adopt agentic AI to close the gap. It highlights Sweet Security’s “Sweet Attack,” which continuously maps real customer environments to find exploitable paths, including shadow IT and shadow AI. #MythosMoment #SweetSecurity #SweetAttack #CSA…
Microsoft and Palo Alto Networks both reported major gains from using advanced AI models to uncover vulnerabilities in their own products and codebases. Microsoft’s MDASH found 16 flaws in Patch Tuesday fixes, while Palo Alto Networks used frontier AI models like Claude Mythos to identify 75 vulnerabilities across more than 130…