News
-
Vishing campaign steals Microsoft 365 sessions
A voice-phishing and extortion campaign is using fake IT calls, adversary-in-the-middle authentication, and residential proxies to take over Microsoft 365 and other SaaS accounts.
-
Google sees attackers adopt agentic workflows
Google says adversaries are moving from basic AI prompting towards agent-enabled cyber operations that can accelerate credential harvesting, cloud abuse, and software supply chain activity.
-
Adobe patches exploited Commerce zero-day
Adobe has issued a priority-one hotfix for a CVSS 10.0 Commerce and Magento Open Source vulnerability that it confirms is being exploited in the wild.
-
Researchers detail closed ChatGPT cross-account channel
Check Point has disclosed a now-closed ChatGPT cross-account channel that used shared internal package infrastructure to relay hidden tasks and data between isolated execution environments.
-
Microsoft fixes two exploited Windows zero-days
Microsoft’s September Patch Tuesday fixes two exploited privilege-escalation zero-days amid its largest monthly security release, although third-party counts differ slightly by methodology.
-
UK space strategy puts resilience first
The UK will develop a resilient national satellite communications system as a £7.8 billion space strategy brings infrastructure, defence, procurement, and economic security under one plan.
-
CRA reporting platform enters operational phase
EU manufacturers face new 24-hour and 72-hour reporting deadlines from 11 September as the Cyber Resilience Act’s Single Reporting Platform goes live.
-
Berlin breach deepens with credential leak
Berlin has confirmed that a second package of stolen government data contained access credentials, prompting tighter controls and temporary restrictions on some administrative systems.
-
Researchers redraw North Korea’s cyber structure
Sekoia and Kudelski Security have divided the old Lazarus umbrella into six operational clusters spanning espionage, financial operations, cryptocurrency theft, and fraudulent IT-worker activity.
-
France arrests suspects in ZeroBytes investigation
French prosecutors have confirmed arrests in the ZeroBytes investigation following attacks including the compromise of the national tax administration.