Cybersecurity

Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled Transport for London, the entity responsible for the public transport network in the Greater London area. The duo were key members of a prolific cybercrime group known as Scattered Spider, and their guilty pleas…

Fable 5 is the supposed safe version of Anthropic’s Mythos Preview, with guardrails to ensure that it can’t be used to create cyberattacks. Well, that restriction was bypassed within days.

UAC-0226 has been identified deploying the GIFTEDCROOK stealer through malicious Excel files, specifically targeting individuals in Ukraine. This cyberattack highlights ongoing threats in the region, as ransomware campaigns continue to evolve and adapt.

Google has resolved a critical vulnerability in Cloud Run that allowed unauthorized access to images via improper IAM configurations. This fix enhances security for users, ensuring tighter restrictions on image access and protecting sensitive data from potential misuse.

CISA has issued a warning regarding critical remote code execution (RCE) vulnerabilities in Sitecore, as active exploits are reported targeting Next.js applications and DrayTek devices. Organizations are urged to apply patches promptly to mitigate risks.

In today’s digital landscape, balancing password security with user experience has become crucial. Experts advocate for strong, multifactor authentication, while emphasizing the need for intuitive design that avoids overwhelming users, ensuring both safety and accessibility.

Microsoft has raised alarms over a phishing campaign targeting the hospitality sector, linked to deceptive emails from Fake Booking.com. This scheme aims to exploit vulnerabilities in hotel booking systems, posing serious risks to sensitive customer data.

Recent findings reveal that traditional risk scores may not accurately reflect true vulnerabilities. A study utilizing adversarial exposure validation highlights critical gaps, urging a reconsideration of risk assessment methods in cybersecurity.

As remote work becomes the norm, the rise of Google Workspace necessitates a robust unified security approach. Organizations must adapt to evolving cyber threats, ensuring data integrity and confidentiality to protect sensitive information in the digital age.

Over 1,000 WordPress sites have been compromised by malicious JavaScript backdoors, allowing persistent access for attackers. Site owners are urged to secure their platforms immediately, as these vulnerabilities can lead to data theft and further exploitation.