AI-powered LLMs like WormGPT 4 and KawaiiGPT are increasingly being used for malicious activities such as generating ransomware, phishing emails, and automation of cyberattacks. These tools significantly lower the barriers for cybercriminals, enabling easier execution of complex threats. #WormGPT4 #KawaiiGPT #Cyberattacks…
Category: Cyber Security News
Several local authorities in London, including RBKC and WCC, are responding to a significant cybersecurity incident impacting multiple IT systems. Authorities are working with the NCSC and ICO while reassuring residents that critical services are being maintained. #KensingtonAndChelsea #WestminsterCityCouncil #LondonCyberattack…
Passwork 7 offers a unified platform for enterprise password and secrets management, enhancing security, control, and automation for organizations of all sizes. The platform’s new features improve usability, security, and integration capabilities, addressing operational and compliance challenges. #Passwork7 #SecretsManagement
Microsoft is set to strengthen Entra ID’s security by enforcing a stricter Content Security Policy to prevent external script injection during user sign-ins starting in October 2026. This update aims to mitigate risks like cross-site scripting attacks, safeguarding organizational authentication processes. #EntraID #ContentSecurityPolicy
Microsoft announced that Windows updates since September 2025 may cause FIDO2 security keys to prompt for a PIN during sign-in, aligning with WebAuthn standards. This change enhances security but can be adjusted in WebAuthn settings for organizations seeking to disable PIN prompts. #WebAuthn #FIDO2SecurityKeys
Two UK local councils, RBKC and WCC, experienced service disruptions due to a cybersecurity incident, affecting essential systems including emergency communication channels. The attack is believed to be a ransomware operation targeting shared IT infrastructure, with investigations ongoing and security experts involved. #RBKC #WCC #ransomware #CyberIncident
South Korea’s financial sector was targeted in a sophisticated supply chain attack involving Qilin ransomware, linked to North Korean threat actors. The campaign, called “Korean Leaks,” involved data leaks, propaganda, and financial extortion, highlighting vulnerabilities in MSP security. #Qilin #MoonstoneSleet…
A recent cyberattack targeted Crisis24’s mass notification system, stealing sensitive user data and causing system downtime. The incident was claimed by the INC ransomware group and has led to widespread warnings for users to change their passwords. #OnSolve #INC RansomwareGroup…
Russian-linked hackers are exploiting 3D design tools, specifically Blender project files, to distribute information-stealing malware targeting animators and developers. The campaign involves embedded Python scripts within malicious files posted on platforms like CGTrader, with the malware StealC V2 stealing browser data, crypto wallets, and messaging app information. #StealC #Blender #CyberThreats #RussianCyberOperations…
Data regulators in Thailand have banned Tools for Humanity from collecting iris scans for cryptocurrency payments, citing violations of the Personal Data Protection Act. The company has been ordered to delete 1.2 million iris scans, amid global bans on similar iris recognition projects. #ToolsForHumanity #IrisScanBan…
Code formatting platforms like JSONFormatter and CodeBeautify are exposing thousands of sensitive secrets, including credentials and API keys, which are exploited by threat actors. Hundreds of organizations across various sectors are affected by these leaks, highlighting the risks of improper data sharing and storage on online tools. #JSONFormatter #CodeBeautify #CredentialLeaks #ThreatActors…
Cybercriminals are causing significant financial losses through account takeover schemes, impersonating financial institutions via social engineering tactics. The FBI emphasizes prompt action and reporting to minimize damage and recover stolen funds. #AccountTakeover #FinancialFraud…
Clover Security has launched from stealth mode with $36 million in funding to provide AI-driven product security solutions targeting early development stages. Their AI agents integrated with popular tools identify vulnerabilities proactively, helping build secure software faster. #CloverSecurity #AIAgent #ProductSecurity…
The OnSolve CodeRED emergency alert system was targeted in a cyberattack by the INC Ransom group, exposing personal data of users. U.S. local governments are transitioning to new systems and implementing contingency plans to maintain alert capabilities. #INC Ransom #CodeRED #cyberattack # emergencyalert #USgovernments…
ASUS has issued firmware updates to address nine security vulnerabilities, including a critical authentication bypass flaw in AiCloud-enabled routers. Users are urged to update their devices immediately and disable remote services to prevent exploitation. #CVE-2025-59366 #OperationWrtHug