Elizabeth Montalbano

Microsoft patched a high-severity vulnerability earlier this month that allows a threat actor to escalate privileges and compromise an AD environment.

The vulnerability in the AI hosting platform Ruflo allows an unauthenticated attacker to take over the system and corrupt memory, so bad behavior can persist after patching.

Researchers intercepted and investigated the model, which was attempting to compromise hosts for proxyjacking to launch other attacks.

The attacks use diverse social engineering lures and rotating payloads to deliver ScreenConnect for persistent remote access to compromised networks.

Google has fixed the issues, which exploited a trust boundary between two AI agents with different privilege levels to trigger automation that could compromise the supply chain.

The botnet adds exploitation modules, credential theft, and reverse SOCKS relays to turn compromised devices into persistent attacker infrastructure.

Adam Shostack shared he was 'blown away' by OpenAI's revelations about the Hugging Face attack, and explains his new framework for LLMs, PHANTOM-B.

The Python-based malware framework takes living-off-the-land tactics to a new heights of stealth, with a modular implant that steals credentials and achieves persistence.

Million-dollar heists, divorce, and career-ending burnout are all stories told in the latest docuseries revealing a behind-the-scenes look at the cybersecurity community.

A spear-phishing campaign by a Chinese-nexus group linked to FamousSparrow provides insight into technical and strategic global moves by APTs.