Threat Intel
Threat actor targets Indian fintechs on weekends when defenders aren’t watching
The Register Security ·
Today, page 17
FBI, CISA warn of cyberattacks targeting refrigeration systems
The FBI and CISA warn that hackers are actively targeting industrial refrigeration and cold-chain monitoring systems worldwide, potentially causing food spoilage, equipment damage, and fire hazards. [...]
BleepingComputer + 1 outlet ·
AI
Killing ill-willed skills: Sophos AI at BSides Sydney
The Sophos AI team presents new research at BSides Sydney
Sophos News ·
EU accuses TikTok of trapping users in harmful ‘rabbit holes’
The European Commission accused TikTok on Friday of failing to prevent its recommendation algorithm from drawing users into “rabbit holes” of content about sadness, self-harm and body image.
The Record ·
AI
Threat actors use agentic AI tooling to find and abuse exposed secrets
Microsoft Threat Intelligence has observed threat actors using the agentic offensive security framework ARTEX to search GitHub for OAuth application secrets, which can be used to compromise the associated OAuth application and perform authenticated actions in…
Microsoft Security Blog ·
Vulnerabilities
Meet *sshole, the vulnerability that lets hackers SSH into Linux devices
Ars Technica Security ·
Feds warn grocers: Don't chill on cyber defenses as freezer hacking spree heats up
The Register Security ·
AI
Fake OpenAI, SpaceX events used to steal Microsoft, Google accounts
Hackers are using fake OpenAI, SpaceX, and Anthropic event invitations to lure employees into phishing attacks, using two different phishing-as-a-service platforms to steal Microsoft and Google account credentials and authentication sessions. [...]
BleepingComputer ·
Social media giants sue California to overturn law shielding kids 15 and under from compulsive use
Google, Meta and TikTok each filed suit in federal court against an incoming California law that blocks platforms from deploying features considered “psychologically exploitative.”
The Record ·
Nearly 1.5 million exposed secrets targeted in new revocation program
Truffle Security has launched the Secrets Revocation Program, a free initiative that helps API key issuers revoke 1.4 million publicly exposed secrets that remain valid. [...]
BleepingComputer ·
Governance
US issues more sanctions against Prince Group scam center affiliates
The sanctions target four people and 41 companies linked to the Prince Group — a Cambodian company accused of running a billion-dollar scam operation.
The Record ·
Air Force cyber official: need to invest in digital forensics
Wanda Jones-Heath said it’s key to keeping pace with incidents and threats, speaking at a Datadog event Thursday. The post Air Force cyber official: need to invest in digital forensics appeared first on CyberScoop .
CyberScoop ·
Cloud
Introducing AWS account access manager: IAM role flexibility with centralized workforce access
AWS Identity and Access Management (IAM) is introducing account access manager, a flexible new way to manage workforce access to your Amazon Web Services (AWS) accounts.
AWS Security Blog ·
Harden cooling systems now, feds warn critical infrastructure operators amid attacks
The U.S. government on Thursday called on critical infrastructure operators to safeguard their cooling systems following hacks that have caused chaos in European supermarkets in recent weeks.
The Record ·