GSocket gives attackers persistent access to compromised Linux servers 
AntiFox-Linked Activity Exposed AWS Production Secrets After Web Server Compromises 
Governments set voluntary rules for commercial cyber intrusion vendors 
France links supermarket refrigeration attacks to Iran-backed group 
eMudhra blames Python key-handling bug for weak certificate keys 
ScreenConnect campaign targets MSPs with rogue remote-access clients
ConnectWise is investigating an active malware campaign that targets managed service providers (MSPs) through compromised ScreenConnect environments. The attackers are...
AI Red-Team Frameworks Accelerate Attacks on Exposed Identity and Cloud Services
AI-enabled penetration-testing frameworks are lowering the effort required to probe public-facing systems, while increasing the speed and persistence of intrusion...
Notion says Fireworks AI breach exposed some customer chat transcripts
Notion has disclosed that a security breach at Fireworks AI, its AI infrastructure provider, exposed Notion AI chat transcripts associated...
MOLE research explores post-quantum privacy credentials for the web
Web services use privacy-preserving credentials to limit abusive traffic without forcing every visitor through CAPTCHAs, account creation or tracking-based identification....
VOLTA infostealer uses AI to rank stolen victim data by value
A Windows infostealer called VOLTA-AUTODOXER adds an artificial intelligence analysis stage to credential theft, turning information collected from a compromised...
CISA memo sets Fiscal 2027 priorities for risk, partnerships and resilience
The Cybersecurity and Infrastructure Security Agency is directing its leaders to align Fiscal 2027 work around national cyber defense, the...
Three Arrested in Alleged AI-Assisted Executive Impersonation Fraud
Three men have been arrested in connection with an alleged fraud scheme that used artificial intelligence to alter and imitate...
Impersonated AI agents complicate customer identity defenses
Automated traffic is increasingly difficult to classify by its declared identity alone. Examples tracked by Cequence Security in October show...
Default ForgeRock Password Exposed Two Automakers’ Connected-Car Accounts
Security researchers found that a default administrator password on identity servers used by two automakers could expose customer accounts and...
Agentic AI framework used to exploit exposed credentials in cloud environments
Threat actors are using an agentic AI framework called ARTEX to locate exposed secrets in public GitHub repositories and, in...