Threat actors are exploiting a critical vulnerability in the Ray AI framework to hijack clusters for crypto-mining and cyber-attacks. This ongoing campaign demonstrates the use of AI-generated payloads, self-propagating worms, and stolen credentials to expand their malicious activities. #CVE-2023-48022 #ShadowRay #RayAI #GitHub #CryptoMining #DDoS…
Category: Cyber Security News
Mate, an AI-driven SOC startup, has secured $15.5 million in seed funding to enhance its intelligent incident response platform. Its solution leverages AI agents and LLMs to automatically investigate, resolve, and escalate security incidents, reducing response times and false positives. #Mate #AIincidentresponse…
This webinar discusses how attackers bypass traditional WAFs and API gateways by exploiting business logic and using AI automation. Attendees will learn about modern API security methods and how to upgrade their defenses against evolving threats. #BusinessLogicAbuse #AI-drivenAutomation…
The ARC Data Sale to U.S. government agencies faced backlash due to unauthorized access to Americansā travel records, prompting ARC to shut down its Travel Intelligence Program. The incident raised privacy and legal concerns, leading to increased scrutiny of government surveillance practices and the protection of personal data. #ARCDataSale #TravelRecords #PrivacyConcerns…
Europol has conducted a major cross-border operation targeting illicit streaming services and digital piracy, successfully tracing approximately $55 million in cryptocurrency. The operation employed a novel strategy of making cryptocurrency purchases to identify and shut down criminal accounts, disrupting numerous piracy sites. #Europol #CryptoCounterStrategy…
Cyber attackers can hide malicious content in seemingly normal documents like Word, Excel, or PDFs, using concealed text or metadata to exfiltrate sensitive data. These tactics exploit trusted applications and AI system vulnerabilities to bypass security measures. #CrossPromptInjection #MetadataExfiltration
An emerging ransomware-as-a-service platform called ShinySp1d3r is being developed by threat actors linked to ShinyHunters and Scattered Spider groups, aiming to enhance their extortion operations. This new ransomware features advanced encryption and anti-analysis measures, with plans for cross-platform versions and a “lightning” variant, threatening various sectors worldwide. #ShinyHunters #ScatteredSpider
CISA has mandated U.S. federal agencies to fix a critical vulnerability in Fortinet’s FortiWeb firewall within a week to prevent exploitation. The OS command injection flaw, tracked as CVE-2025-58034, allows authenticated attackers to execute malicious code, posing significant security risks. #Fortinet #FortiWeb #CVE-2025-58034
DevOps security involves protecting code repositories like GitHub, GitLab, Bitbucket, and Azure DevOps from vulnerabilities, insider threats, and service outages. Adopting best practices such as strict access control, automated backups, and platform-specific security features is crucial for safeguarding mission-critical data. #GitHub #GitLab #Bitbucket #AzureDevOps
Thousands of outdated ASUS WRT routers worldwide have been hijacked in a campaign called Operation WrtHug, exploiting multiple vulnerabilities in the devices. The attack leverages a malicious TLS certificate to identify compromised devices, which are likely used as stealth relay nodes in cyber espionage activities. #ASUSWRT #OperationWrtHug
A China-linked threat actor called PlushDaemon is hijacking software update traffic through a new implant named EdgeStepper to carry out cyberespionage. This group has targeted multiple countries and industries using sophisticated malware and network hijacking techniques. #PlushDaemon #EdgeStepper #SlowStepper
Cloudflare experienced its worst outage in six years, caused by a database permissions change that triggered a cascading failure across its global network. The outage affected major services, but it was confirmed that there was no cyberattack involved. #Cloudflare #GlobalNetwork
A group involved in a massive cryptocurrency heist has seen multiple members, including Kunal Mehta, plead guilty for laundering over $25 million of stolen funds. The scheme involved social engineering, hacking, and sophisticated blockchain laundering techniques to transfer and disguise stolen cryptocurrency, which was used to fund luxurious lifestyles. #CryptoHeist #KunalMehta
The article details a sophisticated cyberattack on a US real estate company using the Tuoni C2 framework, employing techniques such as social engineering, steganography, and in-memory execution. It highlights the growing use of AI-assisted loaders and modular frameworks by threat actors to evade detection and complicate defense efforts. #TuoniC2 #Steganography…
MI5 has revealed that Chinese intelligence is using fake LinkedIn profiles to target UK parliamentarians and officials for espionage. The UK government has responded with new security measures and a counter-espionage action plan to disrupt foreign influence efforts. #ChineseIntelligence #LinkedInEspionage…