-
Attackers are using custom ChatGPT assistants to steer people toward fake security checks that install remote access malware. Huntress researchers linked the custom GPT attacks to a broader campaign involving at least 40 incidents, although they confirmed custom GPT involvement in only two. The scheme combines sponsored Google results, a legitimate ChatGPT page, and a…
-
Two former U.S. Air Force members will serve a combined 15 years and nine months in federal prison for BEC scams and phishing operations. Chijioke Timothy Odimegwu, 25, and Harafat Mogaji, 26, helped divert business payments by stealing login credentials and impersonating trusted contacts. The pair conducted the scheme while stationed at Dover Air Force…
-
Security researchers have demonstrated Branch Target Reuse, a Spectre v2 variant that exposes sensitive information through outdated processor predictions. In Linux experiments on two Intel architectures, the team recovered a root password hash within three to five minutes on average. The result does not mean attackers can instantly obtain the password itself. However, a stolen…
-
An AI agent made conflicting moves and left detailed notes during the DIVD breach, giving investigators evidence to examine. The Dutch cybersecurity nonprofit says an attacker deployed the agent after exploiting a security flaw. However, the attacker’s objectives and the consequences of the intrusion remain unknown. Automated Intrusion Leaves Clues Behind The Dutch Institute for…
-
A Vietnamese national faces money laundering charges over an alleged crypto investment scam that cost one victim approximately $16 million. Prosecutors say cryptocurrency transfers link the victim’s losses to wallets controlled by 37-year-old Trung Nguyen Van. Authorities Arrest Suspect at Los Angeles Airport Van entered the United States through the San Ysidro pedestrian border crossing…
-
A Kiteworks security patch has addressed a critical vulnerability following a precautionary shutdown of customer systems. The company has lifted its shutdown recommendation and says monitoring found no evidence of compromise or suspicious activity. Shutdown Recommendation Ends After Threat Review Kiteworks initially urged customers to take their systems offline after federal intelligence authorities warned of…
-
Apple has released security updates to address an Apple CoreGraphics flaw that may have helped attackers target specific iOS users. The vulnerability can allow malicious files to trigger arbitrary code execution, according to the company’s security notice. Malicious Files Can Trigger Code Execution CoreGraphics handles graphics, image rendering and text drawing across several Apple operating…
-
A Keio ransomware attack has disrupted business systems at the Japanese railway and hotel group. The company disconnected its network after discovering the intrusion on September 26, while initial reports point to hospitality disruption rather than railway operations. Hotel Services Face Possible Delays Keio Plaza Hotel Tokyo warned customers that some services could experience delays…
-
The Times Car breach has exposed personal information linked to approximately 6.6 million current and former member accounts. The Japanese car-sharing operator confirmed the theft on September 28, including driver’s license details and identity verification documents. Former Members Also Fall Within the Breach Times Car says the incident affects both individual customers and participants in…
-
A Magento security breach has put payment details and customer information at risk across more than 3,800 online stores. An attacker calling itself Lockster exploited a critical software flaw, planted checkout malware and created hidden routes back into affected systems. Payment Theft Extends Beyond Checkout Pages For affected merchants, the intrusion involves more than a…