Cybersecurity News - Page 18

AudiA6 operated between 2022 and 2025 as a cryptocurrency mixing service that helped criminals hide the origin of stolen funds.

The attacker added malicious installation scripts that downloaded and executed a rogue npm package during software installation.

Shadowserver reported that attackers had already compromised and backdoored some of publicly accessible Sentry gateways.

The attackers deployed a modified GS-Netcat reverse shell disguised as a legitimate system component for remote access.

In brief: Windows Netlogon, Oracle, PAN-OS bugs exploited in the wild, Gamaredon APT targets Ukrainian government, and more.

TA4922 now conducts more unique campaigns than any other cybercrime actor, says Proofpoint.

The framework's code and payloads were developed using AI agents powered by Cursor and Claude Opus.

The malware spreads through fake Minecraft mods, cheats, clients, and other tools.

The attackers tricked the AI into linking their own email addresses to targeted accounts.

CISA didn’t provide any details on the nature of the exploitation of the vulnerabilities.