News & Map

AI ‘deepfakes’ give US political attack ads a new twist

Manipulated images are filling the airwaves in the run-up to November’s midterm elections

If Chinese AI goes rogue, expect opacity

We now know that Chinese AI agents are inclined to cheat just as US models are. The big difference is that if one causes...

Japanese second-hand retailer reports up to 6.43 mil. customer records leak

Japanese second-hand goods retailer Bookoff Group Holdings Ltd. on Friday became the latest company to announce a data b...

Chinese developer makes ARTEX AI agent closed-source after South Korean bank hack

They said they opposed any illegal use of the software.

Attackers unidentified in most hacking attacks on financial firms: lawmaker

The attackers behind 16 of 18 suspected overseas hacking attacks against South Korean financial companies reported since...

South Korea struggles to curb sexual exploitation sites 10 years after Soranet scandal

A decade after the shutdown of Soranet – a sprawling online hub for secretly filmed and non-consensual sexual videos tha...

S Korean banks likely hacked by China-based actor: CrowdStrike

OpenAI bans Russian, Iranian ChatGPT propaganda networks

OpenAI said Thursday it shut down Russian and Iranian influence operations that used ChatGPT to create fake journalist p...

OpenAI says Iran, Russia influence ops busted

OpenAI on Thursday said it shut down two influence operations -- from Russia and Iran -- that used ChatGPT to push fake ...

FBI disrupts Chinese hacking tools used to breach critical infrastructure

The FBI has seized seven domains used by Chinese state-sponsored hackers known as Flax Typhoon to operate two hacking to...

Anthropic rolls out program for ‘long-term commitment’ to secure critical infrastructure, open source software

The critical infrastructure defense program will seek to pair Claude models, Anthropic engineers and threat research wit...

Post-quantum authentication: Why organizations should start testing certificate ecosystems now

Prepare for post-quantum authentication by testing certificate ecosystems now. Learn how Microsoft’s PQC TLS Pilot Progr...

'AgentCorruption' Puts AWS Environments At Risk With Single Prompt

A now-patched vulnerability in AWS Bedrock AgentCore could allow an attacker to use one AI chatbot to take over an organ...

U.N. Warns Against Technology Used to Read Citizens’ Minds

A report by the secretary-general warned that new technologies could be used to access and criminalize people’s innermos...

Ransomware attack disrupts Japan's IDCF Cloud used by govt clients

IDC Frontier, a major Japanese cloud and digital infrastructure company, disclosed that its IDCF Cloud service was targe...

DOJ, FBI seize Flax Typhoon-linked hacking tools Microscan, FishHub

The seizures of the tools, allegedly operated by the Chinese firm Integrity Tech, accompanied a warning from the FBI, CI...

Ransomware recovery CEO indicted after allegedly paying hackers and pocketing millions

Zohar Pinhasi allegedly deceived ransomware recovery clients into a payment scheme disguised as a specialized service th...

Low-cost Android phones ship with residential proxy malware

A malware campaign dubbed 'Midnight Mimosa' has been discovered on low-cost Android smartphones that ship with malicious...

International coalition seizes tools used by cyber firm behind Flax Typhoon

The U.S. and other nations took down digital tools and infrastructure by Beijing-based Integrity Tech that allowed "wide...

'We always respond in kind' — Zelensky addresses Ukrainian attacks on Russian data center

"We certainly are capable," Zelensky said about striking Russian data centers. "We always respond in kind. Regarding dat...

Pro-Russian hacker group NoName targets Italian Foreign Ministry website

Checks are under way on the websites of Italian embassies and consulates abroad following a suspected similar cyberattac...

Venezuelan Cartel's Malware Honcho Nabbed for ATM Jackpotting

The first cybercriminal to ever make the FBI's "10 Most Wanted Fugitives" list allegedly infused Tren de Aragua's violen...

FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails

Hackers tied to a Chinese cybersecurity company stole email from government organizations, law enforcement agencies, hea...

Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift

Cyber-espionage actor UAC-0099 has been steadily refining its flagship dropper in campaigns targeting Ukrainian organiza...

ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories

The crooks have trust problems of their own. One ransomware affiliate decided to keep the profits for himself. Elsewhere...

OpenAI says Iran, Russia used AI journalists, think tanks to influence Western media

The two campaigns were rated 4 and 5 out of 6 for severity, the first time OpenAI has reported what it considers a high-...

FakeGit malware campaign returns with 17,610 malicious GitHub repos

More than 17,000 fake repositories on GitHub are distributing the SmartLoader malware after the FakeGit campaign reactiv...

DOJ charges ransomware recovery CEO for secretly paying hackers

The owner of a ransomware recovery firm was hit with wire fraud charges for allegedly making secret ransom payments whil...

ASOS: Hackers tricked way into employee account before sending rogue push notification

The company said its investigation, carried out with external experts, found the attackers had accessed “some personal i...

Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks

Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted...

UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML

The Russia-aligned threat actor known as UAC-0099 has been attributed to a previously undocumented .NET infostealer and ...

Cisco warns of critical flaws allowing Nexus switch takeover

Cisco released security advisories for five critical vulnerabilities in its NX-OS data center network operating system t...

Leaked chats show Russian extortion gang sending ‘agents’ into US law firms

In leaked chats, members track dozens of victims, haggle over multimillion-dollar payments and direct operatives based i...

Attackers Hijack Three ccTLDs to Obtain Google Certificates

Attackers compromised .gh, .sl and .as registries to obtain unauthorized HTTPS certificates

ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms

Cybersecurity researchers have disclosed details of a targeted campaign aimed at South Korean financial organizations th...

One Nation’s AI video is vile and tired – but the ensloppification of Australian politics doesn’t stop there

The inflammatory clip shows the wild west of online politicking created by unrestricted access to AI – and why watchdogs...

One Nation’s AI video is vile and tired – but the ensloppification of Australian politics doesn’t stop there

The inflammatory clip shows the wild west of online politicking created by unrestricted access to AI – and why watchdogs...

OAuth grants pile up faster than you can review them. Here's how to keep up.

OAuth grants create data highways between SaaS apps, AI agents, and other tools. And, they are multiplying faster than a...

Hackers target two South Korean megachurches, potentially exposing congregant data

Two of South Korea's largest Protestant churches are investigating cyberattacks that may have exposed sensitive informat...

The Secrets of a US Spyware King

Senior researcher John Scott-Railton speaks to WIRED about the lack of oversight at spyware company Paragon Solutions. T...