A group of 100 firms, including Google, Microsoft, Anthropic, and OpenAI, have signed an open letter calling on countries and organizations worldwide to improve their cyber defenses before AI grows powerful enough to override them. The letter says AI-enabled cyber-attacks will become more widespread and more sophisticated in a matter of months as technology rapidly improves. “AI-enabled cyber-attacks will become far more widespread and sophisticated as models around the world become increasing
infosec (72)
A new social engineering campaign has been discovered in which attackers are using fake passkeys and IT support requests to gain access to Microsoft 365 accounts. Microsoft Threat Intelligence has tracked the activity since May 2026 and says several threat actors, including Storm-3121 and Storm-3032, use these initial-access methods. The company links Storm-3121 activity to ShinyHunters and Falcon extortion, while Storm-3032 represents actors that split from BlackFile and now operate under the
Researchers have been tracking a previously undocumented Linux botnet family, which we have named Evooo1Bot. The name derives from the hardcoded string “evooo1” found in every binary. While the malware reuses the DDoS engine from the publicly leaked Mirai source code, it extends the original framework with numerous capabilities, including encrypted C2 communications, an SSH brute-force scanner, a SOCKS relay module, a credential sniffer, and an integrated exploit arsenal targeting multiple kno
US President Trump has signed a landmark national security presidential memorandum that fundamentally alters the American approach to digital warfare. This directive authorizes federal law enforcement agencies to partner with vetted private technology firms to execute offensive cyber operations against foreign criminal organizations and international adversaries. Under this new framework, private sector specialists will work under direct government supervision to propose, coordinate, and carry
US President Trump has signed a landmark national security presidential memorandum that fundamentally alters the American approach to digital warfare. This directive authorizes federal law enforcement agencies to partner with vetted private technology firms to execute offensive cyber operations against foreign criminal organizations and international adversaries. Under this new framework, private sector specialists will work under direct government supervision to propose, coordinate, and carry
FortiGuard Labs has been tracking a previously undocumented Linux botnet family, which we have named Evooo1Bot. The name derives from the hardcoded string “evooo1” found in every binary. While the malware reuses the DDoS engine from the publicly leaked Mirai source code, it extends the original framework with numerous capabilities, including encrypted C2 communications, an SSH brute-force scanner, a SOCKS relay module, a credential sniffer, and an integrated exploit arsenal targeting multiple
AI is absorbing the volume of work that makes up the fundamental architecture of the Security Operations Center (SOC) tier system. While the tiers and the work aren’t going away, a junior and senior analyst’s day-to-day is changing fast. At some point in the last week, every analyst on your team made the same call. Close an uninvestigated alert, because the queue was too long and triage ate the time real investigation and deep analysis were needed. Most of those calls were right, but odds ar
Researchers at Fortra Intelligence and Research Experts (FIRE) have identified a highly advanced fileless malware campaign specifically targeting large enterprises. The attack is distinguished by its deployment of five distinct layers of obfuscation, engineered to circumvent email, endpoint, and memory-based security systems. This exceptional level of sophistication enables attackers to remain undetected for extended periods, substantially increasing dwell time and complicating forensic inves
In an age when digital exchanges risk exposure to criminal and state actors, the challenge of sending information so that it stays hidden from everyone except the intended recipient, while also hiding who is speaking to whom, takes on increasing importance. A paper titled “Identity-Based Matchmaking Encryption with Enhanced Privacy Against Chosen-Ciphertext Attacks,” by Sohto Chiku, Keitaro Hashimoto, Keisuke Hara, and Junji Shikata, addresses this challenge directly by developing improved meth
Involvement in cybercrime is no longer a peripheral issue but has emerged as a significant social movement among young people. While the average age at arrest for general crimes in the United States is 37, the average age at arrest for cyber-related offenses drops significantly to 19. In the United Kingdom, the National Crime Agency (NCA) reports the average age is even lower, at just 17 years old. This shift is evidenced by high-profile incidents, such as the 2025 attack on Marks and Spencer
An email that appears to contain a shipping document, payment request, or business proposal can infect a Windows computer, even if one of its main components has a .ttf extension.
FortiGuard Labs has named the operation “TTF Trap” after finding widespread phishing activity that uses disguised font files and low-detection Lua loaders. The campaigns have been active since late March 2026, although researchers traced early versions of the loader to October 2025. Fortinet rates the threat as High
Artificial Intelligence is now fundamentally integrated into the planning and execution of cyber-attacks. Europol’s 2026 threat assessment report identifies the combination of automation and AI as a defining feature of modern criminal ecosystems. AI vulnerabilities and AI-enabled fraud are becoming primary concerns for global organizations. Phishing demonstrates this transition clearly. AI-generated messages are increasingly personalized and context-aware, accurately mirroring internal corpo
The National Cyber Security Center (NCSC), alongside the FBI, NSA, and sixteen other international partners, has issued a joint advisory for critical national infrastructure (CNI) sectors. The guidance urges organizations to improve defenses against Russian intelligence services, specifically FSB Center 16. This actor is actively scanning for vulnerable routers, exploiting well-known Cisco device flaws, weak SNMP passwords, and legacy protocols.[1]
In an expert comment, Ian Robinson, Chief Pro
In our connected world, people rely on cryptographic libraries to keep messages, transactions, and identities safe from prying eyes and to ensure that the messages can be trusted. When a library carries the label of formal verification, many assume that a computer has exhaustively confirmed every detail of its behavior. A close examination of several widely adopted libraries shows that this assumption often rests on a less complete foundation than the label suggests.[1]
Formal verification app
Organizations invest heavily in cybersecurity tools, firewalls, and endpoint detection systems. Yet many still encounter serious difficulties when an actual incident occurs. Incident response requires more than a plan on paper. It demands swift and effective execution under pressure. Most small and medium-sized enterprises hold only a basic notion of their actions in a crisis. Someone would contact the IT team and systems would be examined. In practice, a real incident arises amid uncertain
Using FreeWave Zentry Solution and REDXRAY together can help organizations significantly strengthen cyber resilience by improving visibility, reducing operational risk, and accelerating response to emerging threats.
FreeWave Zentry is an engineered, prevention-first Zero Trust network overlay purpose-built for critical infrastructure and OT/IIoT environments that makes assets functionally invisible to unauthorized users and automated threats through a resilient cryptographic fabric, while REDXRA
Hackers are increasingly exploiting trusted artificial intelligence (AI) platforms like ChatGPT and Claude to turn them against their own users. Recently, Hackread.com reported a flaw called ClaudeBleed, discovered by LayerX, which allowed unauthorized browser extensions to hijack Anthropic Claude’s interface. Now, hackers are reportedly abusing official features of these AI tools to spread malware while easily evading web filters and security checks.[1]
The Fake Outage Trick - These observati
Artificial intelligence has become integral to contemporary cyber-attack planning and execution. Recent research demonstrates how embedded AI systems now operate across organized cybercrime activities, fundamentally altering attack methodologies through increased speed and targeting precision. Europol's 2026 threat assessment identifies the integration of automation and AI as a defining characteristic of modern cybercrime. Industry reporting indicates that AI vulnerabilities and AI-enabled fra
Artificial intelligence platforms may be just as susceptible to social engineering as human beings, but they are proving remarkably good at finding security vulnerabilities in human-made computer code. That reality is on full display this month, with some of the more widely used software makers, including Apple, Google, Microsoft, Mozilla, and Oracle, fixing near-record volumes of security bugs and/or quickening the tempo of their patch releases.[1]
As it does on the second Tuesday of every mon
A Brazilian tech firm that specializes in protecting networks from distributed denial-of-service (DDoS) attacks has been enabling a botnet responsible for an extended campaign of massive DDoS attacks against other network operators in Brazil, KrebsOnSecurity has learned. The firm’s chief executive says the malicious activity resulted from a security breach and was likely carried out by a competitor seeking to tarnish his company’s public image.[1]
For the past several years, security experts ha
