General

Microsoft Sues Hacking Group Exploiting Azure AI for Harmful Content Creation​

Microsoft has revealed that it’s pursuing legal action against a “foreign-based threat–actor group” for operating a hacking-as-a-service infrastructure to intentionally get around the safety controls of its generative artificial intelligence (AI) services and produce offensive and harmful content.
The tech giant’s Digital Crimes Unit (DCU) said it has observed the threat actors “develop

Microsoft Sues Hacking Group Exploiting Azure AI for Harmful Content Creation​ Read Post »

DoJ Indicts Three Russians for Operating Crypto Mixers Used in Cybercrime Laundering​

The U.S. Department of Justice (DoJ) on Friday indicted three Russian nationals for their alleged involvement in operating the cryptocurrency mixing services Blender.io and Sinbad.io.
Roman Vitalyevich Ostapenko and Alexander Evgenievich Oleynik were arrested on December 1, 2024, in coordination with the Netherlands’ Financial Intelligence and Investigative Service, Finland’s National Bureau of

DoJ Indicts Three Russians for Operating Crypto Mixers Used in Cybercrime Laundering​ Read Post »

AI-Driven Ransomware FunkSec Targets 85 Victims Using Double Extortion Tactics​

Cybersecurity researchers have shed light on a nascent artificial intelligence (AI) assisted ransomware family called FunkSec that sprang forth in late 2024, and has claimed more than 85 victims to date.
“The group uses double extortion tactics, combining data theft with encryption to pressure victims into paying ransoms,” Check Point Research said in a new report shared with The Hacker News. “

AI-Driven Ransomware FunkSec Targets 85 Victims Using Double Extortion Tactics​ Read Post »

Taking the Pain Out of Cybersecurity Reporting: A Practical Guide for MSPs​

Cybersecurity reporting is a critical yet often overlooked opportunity for service providers managing cybersecurity for their clients, and specifically for virtual Chief Information Security Officers (vCISOs). While reporting is seen as a requirement for tracking cybersecurity progress, it often becomes bogged down with technical jargon, complex data, and disconnected spreadsheets that fail to

Taking the Pain Out of Cybersecurity Reporting: A Practical Guide for MSPs​ Read Post »

Google Project Zero Researcher Uncovers Zero-Click Exploit Targeting Samsung Devices​

Cybersecurity researchers have detailed a now-patched security flaw impacting Monkey’s Audio (APE) decoder on Samsung smartphones that could lead to code execution.
The high-severity vulnerability, tracked as CVE-2024-49415 (CVSS score: 8.1), affects Samsung devices running Android versions 12, 13, and 14.
“Out-of-bounds write in libsaped.so prior to SMR Dec-2024 Release 1 allows remote

Google Project Zero Researcher Uncovers Zero-Click Exploit Targeting Samsung Devices​ Read Post »

Scroll to Top