Blog
-
Federal AI Data Security Guidance Sounds Warnings About Data Drift, Well Poisoning
New joint guidance issued by US government agencies addresses the assortment of threats to AI data security that firms need to be aware of as they tie models into their systems. These include the ways in which stored data can “drift” out of alignment, and the approaches that active threat actors will take to intentionally…
-
World’s Largest Infostealer Malware Operation Suffers Major Blow With Law Enforcement Raid
The infostealer malware operation lost its control panel to the law enforcement raid, severing it from clients and its central marketplace of stolen data, as well as some 2,300 domains belonging to the group, which has infected over 394,000 Windows computers globally.
-
Fake KeePass Password Manager, Distributed Via Bing Ads, Leads to Rash of Ransomware Attacks
A new report from WithSecure documents a recent rash of ransomware attacks, spanning at least eight months, initiated by a fake version of the KeePass password manager that was spread through Microsoft ads.
-
Decentralized, Censorship-Free AI Chatbot Attracts Hackers Seeking Malware
Venice.ai provides a decentralized and censorship-free AI chatbot with capabilities on par with leading LLMs. It’s the first easily accessible “clear web” chatbot that will readily provide the user with malware, custom phishing messages and instructions for criminal activities upon request.
-
“Scattered Spider” Looks to Move on From UK Retailers, Deploy Cyber Attacks in the US Instead
Intelligence from Google’s threat team and subsidiary Mandiant indicates that the “Scattered Spider” group can be attributed as the attackers of major UK retailers in recent weeks, and that the hackers are likely to turn their attention to cyber attacks on US targets in the coming weeks.
-
Coinbase Data Breach Raises More Questions About Crypto Exchange Security
The crypto exchange projects a loss of $180 million to $400 million from the data breach after overseas customer service reps were bribed by unknown parties, who provided the attackers with sensitive personal information then put to use in targeted money transfer schemes.
-
New EU Vulnerability Database Will Complement Existing Sources, At Least For Now
With the CVE program famously facing funding difficulties, the EU has chosen an opportune time to roll out its new European Vulnerability Database. But, at least for the near term, the database looks to be leaning on the CVE database and other sources and acting as a complement rather than a potential replacement.
-
Will the Lockbit Ransomware Group’s Data Breach Finally Finish It Off?
LockBit ransomware has certainly not gone away as a threat; the data breach shows that the group communicated with victims over 4,000 times just between December 2024 and April 2025, and that it still has around 75 affiliates.
-
Security Breach of Messaging App Clone Raises Questions About U.S. Government Communications
An alternative version of the Signal messaging app that was thought to be safe enough for high-level U.S. government officials has suspended service indefinitely after a security breach, and the incident has raised serious questions about how confidential and classified communications are being handled.
-
String of Attacks on UK IT Help Desks Tied to Repeatable Social Engineering Approach
Marks & Spencer and Co-op had reported that their IT help desks were convinced by a caller to reset an employee password. DragonForce has claimed credit for the attacks, all of which impacted major UK retailers, including Harrods.