Bad Actors Exploit Browser Notifications for Phishing Attacks Browser notifications are being used by malicious actors as a new method for phishing attacks through a command-and-control platform known as Matrix Push C2. This framework employs push notifications, fake alerts, and …
Matrix Push C2 Uses Browser Notifications for Fileless, Cross-Platform Phishing Attacks Read More »
The competition to implement agentic AI is in full swing. Throughout the corporate world, systems that can strategize, take action, and collaborate across business applications offer unparalleled efficiency. However, in the haste to automate, one crucial aspect is being neglected: …
Human-centric IAM is failing: Agentic AI requires a new identity control plane Read More »
352 Enhanced Privacy Features in Firefox 145 Mozilla has introduced Firefox 145 with improved fingerprint protection to safeguard users’ digital privacy. This update enhances the prevention of tracking elements that gather system and usage information without disrupting the browsing experience. …
Mozilla Firefox 145 Rolls Out With Advanced Fingerprint Protection Read More »
î ‚Nov 19, 2025î „Ravie LakshmananVulnerability / Threat Intelligence A recently uncovered cyber campaign has compromised tens of thousands of outdated or end-of-life (EoL) ASUS routers globally, with a focus on Taiwan, the U.S., and Russia, to include them in a large …
WrtHug Exploits Six ASUS WRT Flaws to Hijack Tens of Thousands of EoL Routers Worldwide Read More »
When it comes to AI strategies, successful SOCs are distinguished by CISOs who take charge of AI initiatives and proactively address potential obstacles. They systematically break down outdated barriers that hinder progress. At Forrester’s 2025 Security & Risk Summit, the …
For AI to succeed in the SOC, CISOs need to remove legacy walls now Read More »
î ‚Nov 17, 2025î „Ravie LakshmananCybersecurity / Hacking News This week highlighted the importance of vigilance in the face of subtle and sophisticated cyber threats. From silent attacks to the exploitation of trusted tools, the landscape of cybersecurity is evolving rapidly. Criminals …
Fortinet Exploited, China’s AI Hacks, PhaaS Empire Falls & More Read More »
Chinese Hackers Automate Espionage Campaign using Anthropic’s AI Model Recent reports have revealed that Chinese hackers successfully automated 90% of their espionage campaign using Anthropic’s AI model, Claude. This resulted in breaching four out of the 30 targeted organizations. Jacob …
How Anthropic's AI was jailbroken to become a weapon Read More »
The U.S. Department of Justice (DoJ) announced on Friday that five individuals have pleaded guilty to assisting North Korea’s illicit revenue generation schemes by enabling information technology (IT) worker fraud in violation of international sanctions. The five individuals are listed …
Five Plead Guilty in U.S. for Helping North Korean IT Workers Infiltrate 136 Companies Read More »
During the early hours of a Sunday in Los Angeles, a prominent financial services firm on the West Coast is under attack by a nation-state cyberattack squad utilizing living-off-the-land (LOTL) tactics. This sophisticated attack targets the firm’s pricing, trading, and …
î ‚Nov 13, 2025î „Ravie LakshmananBrowser Security / Threat Intelligence Cybersecurity researchers recently discovered a malicious Chrome extension masquerading as a legitimate Ethereum wallet. The extension, named “Safery: Ethereum Wallet,” was uploaded to the Chrome Web Store on September 29, 2025, and …
Fake Chrome Extension “Safery” Steals Ethereum Wallet Seed Phrases Using Sui Blockchain Read More »
