comicform and sectorJ149 hacker deploys form book malware in Eurasian cyberattack
Organizations in Belarus, Kazakhstan and Russia have emerged since at least April 2025 as targets for phishing campaigns carried out by previously undocumented hacking groups called Comicform. Cybersecurity company F6 focuses primarily on activities targeting the industry, finance, tourism, biotechnology, research and trade sectors. The attack chain will send an email with subjects such as […]
Chrome 0-Day, AI Hacking Tools, DDR5 Bit-Flips, npm Worm & More
Sep 22, 2025Ravie Lakshmanan The security landscape now moves at a pace no patch cycle can match. Attackers aren’t waiting for quarterly updates or monthly fixes—they adapt within hours, blending fresh techniques with old, forgotten flaws to create new openings. A vulnerability closed yesterday can become the blueprint for tomorrow’s breach. This week’s recap explores […]
How to control AI agents and nonhuman identity
We hear this a lot: “We run hundreds of service accounts and AI agents in the background. We didn’t create most of them. We don’t know who owns them. How are you supposed to secure them?” All businesses today run more than users. Behind the scenes there are thousands of nonhuman identities that move from […]
Microsoft Patch Essential EntraID Fault Enables Global Administrator Issue for Tenants Whole Global Administrators
A critical token validation failure in Microsoft Entra ID (formerly Azure Active Directory) could have allowed an attacker to have users, including global administrators, impersonate any tenant. The vulnerability tracked as CVE-2025-55241 has been assigned a maximum CVSS score of 10.0. It is described by Microsoft as a flaw in Azure Entra privilege escalation. There […]
DPRK hackers use Clickfix to deliver Beavertail malware with Crypto Job Scams
Threat actors with ties to the Democratic Republic of Korea (aka DPRK or North Korea) have been observed to leverage Clickfix-style lures to provide known malware called Beavertail and Invisibleterret. “Threat actors used Clickfix lures to target marketing and trader roles in organizations in the cryptocurrency and retail sectors, rather than targeting software development roles,” […]
LastPass warns about fake repositories that infect MacOS with Atomic Infostealer
September 20, 2025Ravi LakshmananSoftware Security/Malware LastPass warns of a continuous and widespread information steeler campaign targeting Apple MacOS users via fake GitHub repositories that distribute malware-covered programs pose as legitimate tools. “In the case of LastPass, the fraudulent repository redirected potential victims to a repository that downloads Atomic Infostealer malware,” researchers Alex Cox, Mike Kosak […]
Researchers discover GPT-4-driven malterminal malware and create ransomware, reverse shell
Cybersecurity researchers have discovered what they say is the earliest known example of malware that has baking of large-scale language modeling (LLM) features to date. The malware is codenamed Malterminal by the Sentinelone Sentinelabs Research Team. The findings were presented at the Labscon 2025 Security Conference. In a report examining malicious use of LLMS, cybersecurity […]
ShadowLeak Zero-Click Flaw Leaks Gmail data Openai Chatgpt Deep Search Agent
September 20, 2025Ravi LakshmananArtificial Intelligence/Cloud Security Cybersecurity researchers revealed a zero-click flaw in Openai ChatGpt’s deep search agent. This allows an attacker to leak sensitive Gmail Inbox data in one email created without user actions. The new class of attacks is codenamed ShadowLeak by Radware. Following the responsible disclosure on June 18, 2025, the issue […]
UNC1549 Hacking 34 devices from 11 telecom companies via LinkedIn Job Lures and Minibike malware
The Iranian-Nexus Cyberspy Group, known as UNC1549, has infiltrated 34 devices across 11 organizations as part of their recruitment efforts on LinkedIn, resulting in a new campaign targeting European telecom companies. Swiss Cybersecurity Company Prodaft tracks clusters under the name of subtle snails. It is believed to be partnering with Iran’s Islamic Revolutionary Guard (IRGC). […]
1,500 VPS victims daily across SystemBC Powers Rem Proxy 80 C2 servers
September 19, 2025Ravi LakshmananBotnet/Network Security The proxy network, known as Lem Proxy, is powered by malware known as SystemBC, which provides users with around 80% of the botnet, according to a new survey from the Black Lotus Labs team at Lumen Technologies. “Rem Proxy is a considerable network, selling a pool of 20,000 Mikrotik routers […]