Tag: cybercriminal tactics

  • Krebs on Security: ShinyHunters Wage Broad Corporate Extortion Spree

    Source URL: https://krebsonsecurity.com/2025/10/shinyhunters-wage-broad-corporate-extortion-spree/ Source: Krebs on Security Title: ShinyHunters Wage Broad Corporate Extortion Spree Feedly Summary: A cybercriminal group that used voice phishing attacks to siphon more than a billion records from Salesforce customers earlier this year has launched a website that threatens to publish data stolen from dozens of Fortune 500 firms if they…

  • The Register: Akira ransomware crims abusing trifecta of SonicWall security holes for extortion attacks

    Source URL: https://www.theregister.com/2025/09/10/akira_ransomware_abusing_sonicwall/ Source: The Register Title: Akira ransomware crims abusing trifecta of SonicWall security holes for extortion attacks Feedly Summary: Patch, turn on MFA, and restrict access to trusted networks…or else Affiliates of the Akira ransomware gang are again exploiting a critical SonicWall vulnerability abused last summer, after a suspected zero-day flaw actually turned…

  • Cisco Talos Blog: Year in Review: AI based threats

    Source URL: https://blog.talosintelligence.com/year-in-review-ai-based-threats/ Source: Cisco Talos Blog Title: Year in Review: AI based threats Feedly Summary: 2024 wasn’t the year that AI rewrote the cybercrime playbook — but it did turbocharge some of the old tricks. Read this summary of AI-based threats, from Talos’ 2024 Year in Review. AI Summary and Description: Yes Summary: The…

  • Cisco Talos Blog: Unmasking the new XorDDoS controller and infrastructure

    Source URL: https://blog.talosintelligence.com/unmasking-the-new-xorddos-controller-and-infrastructure/ Source: Cisco Talos Blog Title: Unmasking the new XorDDoS controller and infrastructure Feedly Summary: Cisco Talos observed the ongoing global spread of the XorDDoS malware, predominantly targeting the United States, with evidence suggesting Chinese-speaking operators are using sophisticated tools to orchestrate widespread attacks. AI Summary and Description: Yes **Summary:** The text discusses…

  • CSA: Offensive vs. Defensive AI: Who Wins the Cybersecurity War?

    Source URL: https://abnormalsecurity.com/blog/offensive-ai-defensive-ai Source: CSA Title: Offensive vs. Defensive AI: Who Wins the Cybersecurity War? Feedly Summary: AI Summary and Description: Yes Summary: The text explores the dual nature of AI in cybersecurity, highlighting both offensive and defensive AI tactics. It emphasizes the rapid evolution of cybercrime leveraging AI, portraying it as a trillion-dollar industry…

  • The Register: Ransomware isn’t always about the money: Government spies have objectives, too

    Source URL: https://www.theregister.com/2025/02/12/ransomware_nation_state_groups/ Source: The Register Title: Ransomware isn’t always about the money: Government spies have objectives, too Feedly Summary: Analysts tell El Reg why Russia’s operators aren’t that careful, and why North Korea wants money AND data Feature Ransomware gangsters and state-sponsored online spies fall on opposite ends of the cyber-crime spectrum.… AI Summary…

  • The Register: Microsoft sues ‘foreign-based’ criminals, seizes sites used to abuse AI

    Source URL: https://www.theregister.com/2025/01/13/microsoft_sues_foreignbased_crims_seizes/ Source: The Register Title: Microsoft sues ‘foreign-based’ criminals, seizes sites used to abuse AI Feedly Summary: Crooks stole API keys, then started a hacking-as-a-service biz Microsoft has sued a group of unnamed cybercriminals who developed tools to bypass safety guardrails in its generative AI tools. The tools were used to create harmful…

  • CSA: How Can Financial Services Enhance Cybersecurity?

    Source URL: https://www.dazz.io/blog/10-facts-about-cybersecurity-for-financial-services Source: CSA Title: How Can Financial Services Enhance Cybersecurity? Feedly Summary: AI Summary and Description: Yes Summary: The text highlights the increasing cyber threats faced by financial services organizations and the strategies being implemented to enhance their security posture, specifically focusing on automated security posture management (ASPM) as a solution for vulnerability…