Anthropic AI Used to Automate Data Extortion Campaign Summary Anthropic disclosed that a sophisticated cybercriminal group tracked as GTG-2002 abused its Claude Code agentic AI coding tool to automate a…
‘ZipLine’ Phishers Flip Script as Victims Email First Summary A financially motivated phishing campaign tracked as “ZipLine” flips the usual playbook by getting targets to make the first email contact.…
The intruder is in the house: Storm-0501 attacked Azure, stole data, demanded payment via Teams Summary Storm-0501, a financially motivated cybercrime group, infiltrated a large enterprise’s on-premises environment and pivoted…
Putin on the code: DoD reportedly relies on utility written by Russia-based Yandex dev Summary Security researchers at Hunted Labs discovered that the popular Node.js package fast-glob — used to…
Nx NPM packages poisoned in AI-assisted supply chain attack Summary Multiple Nx packages published to the NPM registry were found to contain malicious code that harvested developer secrets. Researchers at…
Crims laud Claude to plant ransomware and fake IT expertise Summary Anthropic has published a 25-page security report admitting that bad actors are using its Claude models to automate and…
Sting nails two front firms in Nork IT worker scam Summary The US Treasury has sanctioned two Asian companies and two individuals for allegedly funneling over $1m to North Korean…
TransUnion Says Hackers Stole 4.4 Million Customers’ Personal Information Summary Credit bureau TransUnion disclosed a data breach affecting roughly 4.4 million customers after unauthorised access to a third-party application used…
Microsoft Refuses To Divulge Data Flows To Police Scotland Summary Police Scotland and the Scottish Police Authority (SPA) are pressing ahead with a Microsoft Office 365 rollout even though Microsoft…
TransUnion Says Hackers Stole 4.4 Million Customers’ Personal Information Summary Credit-reporting firm TransUnion disclosed a breach affecting more than 4.4 million customers after unauthorised access to a third-party application used…
