A hacking group with connections other than Pakistan has been discovered targeting Indian government organizations with a modified variant of a remote access trojan (RAT) known as DRAT. The activity has been linked by Recorded Future\’s Insikt Group to a …
TAG-140 Deploys DRAT V2 RAT, Targeting Indian Government, Defense, and Rail Sectors Read More »
Threat actors have been exploiting exposed Java Debug Wire Protocol (JDWP) interfaces to gain code execution capabilities and deploy cryptocurrency miners on compromised hosts. The attackers utilized a modified version of XMRig with a hardcoded configuration to avoid detection. Cloud …
Exposed JDWP Interfaces Lead to Crypto Mining, Hpingbot Targets SSH for DDoS Read More »
The National Security Bureau (NSB) of Taiwan has issued a warning about security risks associated with Chinese-developed applications such as RedNote, Weibo, TikTok, WeChat, and Baidu Cloud. The NSB highlighted concerns over excessive data collection and data transfer to China, …
Taiwan NSB Alerts Public on Data Risks from TikTok, Weibo, and RedNote Over China Ties Read More »
î ‚Jul 04, 2025î „The Hacker NewsAI Security / Enterprise Security Generative AI is revolutionizing the way businesses operate, learn, and innovate. However, beneath the surface, there is a concerning trend. AI agents and custom GenAI workflows are inadvertently creating new avenues …
Your AI Agents Might Be Leaking Data — Watch this Webinar to Learn How to Stop It Read More »
If you’re assessing AI-powered SOC platforms, you’ve probably encountered bold claims: quicker triage, smarter remediation, and reduced noise. However, not all AI is the same under the hood. Many solutions depend on pre-trained AI models tailored for specific use cases, …
The Hidden Weaknesses in AI SOC Tools that No One Talks About Read More »
î ‚Jul 02, 2025î „Ravie LakshmananCybercrime / Dark Web The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) has imposed sanctions on Russia-based bulletproof hosting (BPH) service provider Aeza Group for aiding threat actors in carrying out malicious activities …
2 In the latest June 2025 Patch Tuesday update from Microsoft, a significant number of critical vulnerabilities and zero-day flaws have been addressed. With more than 70 different fixes included in this update bundle, it is crucial for all Microsoft …
June Patch Tuesday from Microsoft Fixed 70+ Bugs Read More »
The FBI has disclosed that the cybercrime group Scattered Spider is expanding its targeting to the airline sector. The agency is actively collaborating with aviation and industry partners to combat this activity. According to the FBI, Scattered Spider employs social …
FBI Warns of Scattered Spider’s Expanding Attacks on Airlines Using Social Engineering Read More »
AI inference attacks can have a detrimental impact on enterprise finances, regulatory compliance efforts, and the return on investment of new AI implementations. These attacks essentially drain budgets and pose a threat to the successful deployment of AI technologies. It …
How runtime attacks turn profitable AI into budget black holes Read More »
To revamp the given article for WordPress integration, the following revised version can be used: î ‚Jun 28, 2025î „Ravie LakshmananMalware / Cyber Warfare The GIFTEDCROOK malware has evolved into a sophisticated intelligence-gathering tool, showcasing enhanced capabilities to extract sensitive documents from …
From Browser Stealer to Intelligence-Gathering Tool Read More »
