10 casos · pág. 1/1
G7 finance ministers agreed to hold simulation exercises to test responses to cyberattacks enabled by artificial intelligence. Japan's Finance Minister Satsuki Katayama announced the decision after a G7 finance ministers and central bank governors meeting held alongside the IMF annual meeting in Bangkok. The move follows an IMF warning th…
ThreatBook announced RedAgents on October 16, 2026. It is a SaaS platform that runs several AI penetration testing agents in parallel against authorized targets and shows the findings in one interface. The platform combines Artex Pro, Cyber(YanJi), Yanxun and CyberStrikeAI Enterprise Edition. ThreatBook says that combining agents improves…
Bank of America hired 1,000 extra contractors in Q2 to patch the volume of vulnerabilities surfaced by Anthropic's Mythos AI model, CEO Brian Moynihan said on the Q3 earnings call. The contractors supplement about 3,000 existing technical staff and are still on site. Moynihan put remediation costs at "a couple of hundred million plus", a …
Proofpoint disclosed an active campaign, tracked as UNKCondorFiltration, that used the TeamFiltration offensive framework against more than 5,700 accounts across 28 Microsoft 365 tenants. It focused mainly on Chilean retail and financial institutions and originated from 1,487 unique AWS EC2 IP addresses. Seven accounts were compromised, a…
On October 8, the U.K. imposed economic sanctions on Cryptomus (formerly Certa Payments and Xeltox Enterprises, rebranded as Heleket) for processing payments that benefit the Russian government and its financial institutions. The sanctions also cover the virtual payment platforms VexPay, TokenSpot and Tsunami Payments. Experts describe Cr…
Flare research, published as sponsored content, describes how underground forums package services that defeat Know Your Client (KYC) identity checks. Offerings include forged identity and financial documents, manipulated photos and AI-generated videos, live deepfake tools, and accounts advertised as already verified. The article cites the…
Episode 487 of the Smashing Security podcast covers the hijacking of Microsoft's official X (Twitter) account, which has 13 million followers. The attackers used a Clippy theme to promote a dubious crypto coin, and a corporate apology that circulated was not from Microsoft either. There was no ransomware or data theft. The episode also co…
Threat actors are abusing the open source AI platform Cairn, an agent-coordination engine usable as an autonomous penetration testing tool, to automate attacks on hundreds of websites worldwide. AI security firm Norforge found the activity after threat actors left their Cairn panels exposed, following a Gambit Security report on attackers…
ESET documented the evolution of MATCHBOIL, a custom C downloader used by the Russia-aligned cyberespionage group UAC-0099. Samples span April 2024 to April 2026, although CERT-UA first documented the malware in August 2025. Each iteration became more sophisticated, with new obfuscation, sandbox checks and persistence methods. All victims…
A still-unknown actor hacked thousands of remote-controlled refrigeration systems across hundreds of French grocery stores, spiking temperatures, spoiling food and sparking fires. The incident fits a broader trend of extortionists and other attackers going after physical systems to maximise real-world pressure on victims. Earlier examples…
