Security News

PlayPraetor Reloaded: CTM360 Uncovers a Play Masquerading Party
2025-04-10 11:25

Overview of the PlayPraetor Masquerading Party Variants CTM360 has now identified a much larger extent of the ongoing Play Praetor campaign. What started with 6000+ URLs of a very specific banking...

Infosec experts fear China could retaliate against tariffs with a Typhoon attack
2025-04-10 11:00

Scammers are already cashing in with fake invoices for import costs World War Fee As the trade war between America and China escalates, some infosec and policy experts fear Beijing will strike...

The Identities Behind AI Agents: A Deep Dive Into AI & NHI
2025-04-10 11:00

AI agents have rapidly evolved from experimental technology to essential business tools. The OWASP framework explicitly recognizes that Non-Human Identities play a key role in agentic AI security....

#AI
Gamaredon Uses Infected Removable Drives to Breach Western Military Mission in Ukraine
2025-04-10 10:53

The Russia-linked threat actor known as Gamaredon (aka Shuckworm) has been attributed to a cyber attack targeting a foreign military mission based in Ukraine with an aim to deliver an updated...

FortiSwitch vulnerability may give attackers control over vulnerable devices (CVE-2024-48887)
2025-04-10 10:09

Fortinet has released patches for flaws affecting many of its products, among them a critical vulnerability (CVE-2024-48887) in its FortiSwitch appliances that could allow unauthenticated...

Europol Arrests Five SmokeLoader Clients Linked by Seized Database Evidence
2025-04-10 09:55

Law enforcement authorities have announced that they tracked down the customers of the SmokeLoader malware and detained at least five individuals. "In a coordinated series of actions, customers of...

Europol: Five pay-per-infect suspects cuffed, some spill secrets to cops
2025-04-10 08:35

Officials teased more details to come later this year Following the 2024 takedown of several major malware operations under Operation Endgame, law enforcement has continued its crackdown into...

ChatGPT's o4-mini, o4-mini-high and o3 spotted ahead of release
2025-04-10 08:08

OpenAI is preparing to launch as many as three new AI models, possibly called "o4-mini", "o4-mini-high" and "o3". [...]

AkiraBot Targets 420,000 Sites with OpenAI-Generated Spam, Bypassing CAPTCHA Protections
2025-04-10 07:15

Cybersecurity researchers have disclosed details of an artificial intelligence (AI) powered platform called AkiraBot that's used to spam website chats, comment sections, and contact forms to...

The Reg translates the letter in which Oracle kinda-sorta tells customers it was pwned
2025-04-10 06:17

TL;DR: Move along, still nothing to see here - an idea that leaves infosec pros aghast Oracle's letter to customers about an intrusion into part of its public cloud empire - while insisting Oracle...