News

Indian banking malware attack exposes 50,000 users, stealing financial data via SMS interception and phishing

The UK and its Five Eyes partners have launched new security guidance for edge device manufacturers and network defenders

Check Point has observed cybercriminals toy with Alibaba’s Qwen LLM to develop infostealers

Contrast Security reveals a 12.5% annual increase in destructive cyber-attacks on banks

The SVG file format can harbor malicious HTML, scripts, and malware

Microsoft’s AI Red Team just published “Lessons from
Red Teaming 100 Generative AI Products.” Their blog post lists “three takeaways,” but the eight lessons in the report itself are more useful:

1. Understand what the system can do and where it is applied.
2. You don’t have to compute gradients to break an AI system.
3. AI red teaming is not safety benchmarking.
4. Automation can help cover more of the risk landscape.
5. The human element of AI red teaming is crucial.
6. Responsible AI harms are pervasive but difficult to measure.
7. LLMs amplify existing security risks and introduce new ones.
8. The work of securing AI systems will never be complete.

DaggerFly’s Lunar Peek campaign is using a new malware strain, identified by FortiGuard Labs, to compromise Linux networks

A sophisticated phishing campaign targeting Microsoft ADFS has been observed, affecting more than 150 organizations

Picus Security reports infostealer surge after revealing credentials appear in 29% of malware

Check Point Research has found over 10 million stolen credentials associated with EMEA organizations exposed on cybercrime markets