The Dutch Ministry of Defence is warning that a likely state-backed Russian group is trawling Signal and WhatsApp with a phishing campaign targeting a broad range of government sources and sometimes journalists.
Rather than pushing technology developers and platforms to boost their defenses, the new Trump “Cyber Strategy for America” vision lays out a sort of “Donroe Doctrine” for the internet. The paper is short and not heavy on specific details, but the tone makes clear the focus is on increasing federal aggression against bad actors in cyberspace.
A group of seemingly profit-minded criminal hackers has been spotted seeking out known FortiGate vulnerabilities and exploiting them to sell ongoing access to other threat actors, in at least one case setting up a fake administrator account with full access to all zones.
A 2024 cyber attack involving Polyfill.io was long assumed to be the work of Chinese hackers, but new evidence indicates it was more likely North Korea’s state-sponsored hacking teams making use of a Chinese front company.
State-backed Chinese threat actors have once again been linked to a high-profile security breach, this time of FBI surveillance systems used for foreign intelligence interception orders.
Most of the impacted Google API keys were put into place years ago (and prior to Gemini AI), when they were not at all the same sort of risk. Scans by security researchers have since found thousands of these exposed keys in webpage and app code that anyone can view.
OpenClaw is everyone’s favorite AI agent of the moment and can enable some very helpful productivity hacks, but the last few weeks have also demonstrated it has a long way to go in terms of security.
Google and Mandiant bring news of yet another group that was operating largely below the radar, yet having great success compromising government and telecoms victims throughout the world since at least 2017. In total the gang racked up suspected intrusions in about 70 nations, with 53 confirmed breaches during operations running from 2018 to last year.
Another day, another story about agentic AI tools overstepping their bounds. This time it’s Microsoft’s Copilot for 365 business customers, which has been found accessing confidential emails it is not supposed to and creating summaries of them.
A sample size of three of the most popular and widely used password managers (Bitwarden, LastPass and DashLane) finds that they share similar vulnerabilities, and that some of these are likely not things that can be fully addressed given the nature of how cloud-based vaults protect secrets.