Attackers exploit identity verification processes, particularly during onboarding and account recovery, to gain unauthorized access to corporate systems.
The latest ShinyHunters breaches highlight the growing risk of identity-based attacks, where attackers target identities, authentication workflows, and trusted access paths to gain unauthorized access to sensitive data.
Klue has confirmed a security incident where threat actors stole OAuth tokens to access customers' Salesforce environments, with the Icarus hackers claiming responsibility for the attack.
Prinz Eugen ransomware prioritizes recently modified files for encryption, leaving no ransom note on the system, and operates outside the ransomware-as-a-service model.
A USB worm is spreading crypto-stealing malware via Windows shortcut files, targeting cryptocurrency wallets and using the Tor network to conceal communication.
Nintendo of America confirmed that threat actors stole internal survey data from the third-party TinyPulse service, with the Shadowbyt3$ group demanding a $2 million ransom
Cybersecurity firms Huntress and Recorded Future were impacted by a supply chain attack on market intelligence platform Klue, resulting in unauthorized access to customer data.
French President Emmanuel Macron has urged the US to share cutting-edge AI with other democracies, warning of a potential drop in value for US firms if they restrict access.
Accenture acquires majority stake in Dragos and purchases runZero and NetRise, investing $4.18 billion in industrial cybersecurity.
The Gentlemen ransomware-as-a-service uses multiple endpoint detection and response killers to evade detection, including a tool dubbed GentleKiller with at least eight variants.