Today, page 26
Defense and aerospace firm settles with government over allegedly failing to meet cybersecurity contract requirements
ILC settled for $13 million, and its parent company said it resolved the issues before settling without an admission of liability. The post Defense and aerospace firm settles with government over allegedly failing to meet cybersecurity contract requirements…
CyberScoop ·
AI
WorkOS says attacker used ARTEX AI to breach internal sales app
Developer platform WorkOS suffered a data breach after a threat actor accessed business contact records and summaries of customer communications. [...]
BleepingComputer ·
Oklahoma man charged with mailing threats, substances to election officials nationwide
Robin Patrick Martin was charged with conveying false or misleading information and hoaxes and mailing threatening communications in an effort to intimidate election officials.
CyberScoop ·
AI
Google: LLMjacking attacks rack up $1 million in cloud AI charges
Large language model hijacking attacks, also known as LLMjacking, are generating large fraudulent cloud charges, with some organizations losing more than $100,000 per day. [...]
BleepingComputer ·
Identity
mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious Activity
The Hacker News ·
Threat Intel
Several German lawmakers and foreign policy staff received Apple warnings on spyware
Members of Germany's political elite were among the spyware targets in 99 countries that Apple personally warned recently.
The Record ·
British businesses caught in Europe-wide supermarket fridge attacks
Supermarket and grocery store refrigerator controls across Europe were hacked in the early hours of Monday in the second such wave of attacks in recent weeks — following a first wave in France — with unidentified perpetrators defrosting fridges and causing…
The Record ·
AppSec
Hardening GitHub Actions Against Outside Threats
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.
Socket Blog ·
Threat Intel
Fake-download campaign uses trojanized installers to deliver monetization payloads
Microsoft Threat Intelligence tracks a fake-download campaign that uses trojanized Inno installers to deliver multiple monetization offers and provides detection and investigation guidance across the complete installer session.
Microsoft Security Blog ·
Europol dismantles investment scheme that impacted potential victims in 50 countries
Authorities seized more than 100 servers and searched locations linked to the alleged operation across 17 countries. The post Europol dismantles investment scheme that impacted potential victims in 50 countries appeared first on CyberScoop .
CyberScoop ·
Threat Intel
Binance CEO says ‘months-long campaign’ led to $6.3 billion theft as N. Korea denies responsibility
North Korean attackers "combined a range of techniques, including social engineering by fake recruitment interviews," Binance said about the multibillion-dollar crypto heist it discovered in October.
The Record ·
Ballot scanner malfunctions, flurry of federal legal actions test election officials on final day of voting
Rumors of malfeasance spread on X despite no evidence, as election officials continue to fight off numerous legal challenges from the Trump administration in the last 48 hours.
CyberScoop ·
Identity
Password manager mSecure tells users to change passwords, won't say why
The Register Security ·
Vulnerabilities
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
Ars Technica Security ·
Identity
cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes
The Hacker News ·