Threats & incidents
-
Anthropic details AI-assisted espionage campaigns
Anthropic says Russia-linked and China-linked actors have used Claude across cyber operations, offering new evidence of AI moving deeper into offensive workflows.
-
Dutch NCSC warns on critical Check Point VPN flaws
Dutch cyber authorities expect attempts to exploit two critical Check Point VPN vulnerabilities, increasing pressure on organisations running internet-facing gateways to apply available fixes.
-
Phishing pages move inside victims’ browsers
Barracuda has analysed a campaign that builds malicious pages inside victims’ browsers using blob URLs after routing users through legitimate Microsoft services.
-
Boston Scientific cyberattack hits financial outlook
Boston Scientific says the August cyberattack will materially affect its third-quarter and full-year results after disrupting manufacturing, distribution and customer-order processing.
-
Fake Adobe pages install rogue ScreenConnect
Huntress has found two phishing attacks using fake Adobe Reader pages and browser-in-the-browser deception to install multiple rogue ScreenConnect clients for persistent remote access.
-
Cisco firewall flaws exploited in active attacks
Cisco Talos has confirmed exploitation of two Secure Firewall Management Center vulnerabilities across intrusions involving state-linked activity and a ransomware operator.
-
N-able confirms separate N-central flaw exploited
N-able says a newly identified N-central vulnerability has been exploited in the wild, days after customers were told to patch other serious flaws in the remote-management platform.
-
Ransomware claims hit record August level
Comparitech recorded 997 confirmed and claimed ransomware incidents in August, its highest monthly total, with Germany, Italy, and the UK among the most affected countries.
-
Vishing campaign steals Microsoft 365 sessions
A voice-phishing and extortion campaign is using fake IT calls, adversary-in-the-middle authentication, and residential proxies to take over Microsoft 365 and other SaaS accounts.
-
Adobe patches exploited Commerce zero-day
Adobe has issued a priority-one hotfix for a CVSS 10.0 Commerce and Magento Open Source vulnerability that it confirms is being exploited in the wild.