Aggregator

LastPass warns of a phishing campaign using fake security alerts about unauthorized access or password changes to steal users’ master passwords. LastPass has warned users about a new phishing campaign using fake security alerts that claim unauthorized access or master password changes. The emails, which spoof LastPass’s display name, attempt to trick recipients into revealing […]

Мошенники создают фейковые чаты спортклубов для распространения Android-трояна BTMOB RAT.

A routine RDP brute-force alert led to unusual credential hunting and a geo-distributed VPN-linked infrastructure. Huntress Labs explains how one compromised login unraveled a suspected ransomware-as-a-service ecosystem tied to initial access brokers. [...]

Cloudflare is introducing Attack Signature Detection and Full-Transaction Detection to provide continuous, high-fidelity security insights without the manual tuning of traditional WAFs. By correlating request payloads with server responses, we can now identify successful exploits and data exfiltration while minimizing false positives.

Increased attempts to compromise surveillance cameras linked to Iran during Middle East conflict

Dark Reading Confidential Episode 15: Interpol relied on Will Thomas and team to help break up a sprawling cybercrime ring, leading to the arrest of 574 suspects, the recovery of more than $3 million, and the decryption of six malware variants. Here's his story.

Win11Debloat: A 40k-Star PowerShell Script for Stripping Bloatware, Telemetry, and AI Features from Windows

The gap between human-led attacks and machine-driven intrusions is closing faster than most organizations expected. Cloudforce One, Cloudflare’s dedicated threat intelligence team, released the inaugural 2026 Cloudflare Threat Report on March 3, 2026, issuing a clear warning: artificial intelligence has become a core engine behind modern cyber attacks. Built from trillions of network signals gathered […]

The post New Threat Report Warns of AI is Automating High-Velocity Attacker Operations appeared first on Cyber Security News.

Software security has reached an inflection point as AI development tools increase the volume and velocity of software releases, while AI is also powering the next generation of threat actors driving attack volume and sophistication to new heights. For security teams, this is not just acceleration – it is multiplication: more apps, more releases, and more opportunities for attackers. The challenge is no longer protecting just flagship applications but securing all Android and iOS releases … More →

The post Digital.ai expands post-build protection for Android and iOS applications appeared first on Help Net Security.

Swap scams target traders through fake DEX sites, token approvals, and phishing. Learn how to detect swap scams and protect funds before you swap now.

New York, USA, 4th March 2026, CyberNewswire

Tufin announced its latest AI-powered innovations, enabling customers to utilize its Unified Control Plane to accelerate issue resolution, reduce operational friction, and limit risk – even as network complexity continues to grow. Security teams face pressure to move faster while maintaining a secure network environment. The complexity of the network makes it harder and harder to keep tabs on where potential problems are and opens up opportunities for attackers using advanced AI tools to take … More →

The post Tufin’s AI-powered tools simplify network security operations appeared first on Help Net Security.

In December 2025, Check Point Research disclosed one of the most carefully engineered cloud-native malware frameworks ever studied — VoidLink. Unlike most threats that are ported from older Windows tools, VoidLink was built from scratch to target Linux-based cloud and container environments. Its design reflects a clear shift in how attackers now approach enterprise infrastructure, […]

The post VoidLink Malware Framework Attacking Kubernetes and AI Workloads appeared first on Cyber Security News.

Российские парламентарии начали массово получать уведомления от Apple.

How to detect and respond to OAuth consent attacks in Google Workspace

Malware campaign uses Ukrainian email service for credibility, deploying "BadPaw" to execute attacks

Researchers have identified a suspected Russian espionage campaign targeting Ukraine that uses two previously undocumented malware strains.

A three-person development team in Mexico is facing bankruptcy after a stolen Google Cloud API key generated $82,314.44 in unauthorized charges over just 48 hours. Between February 11 and 12, attackers heavily abused the team’s credentials to access the “Gemini 3 Pro Image” and “Gemini 3 Pro Text” endpoints, causing a massive 455x spike over […]

The post Stolen Gemini API Key Turned $180 Bill to $82000 in Two Days appeared first on Cyber Security News.

A dangerous new chapter in Middle Eastern geopolitics has unfolded following the outbreak of open conflict between Iran, Israel, and the United States. Last week, U.S. and Israeli forces launched Operation Lion’s Roar, a coordinated military strike targeting Iranian military and nuclear installations. The attack immediately triggered retaliatory responses from Iran, rapidly expanding beyond physical […]

The post Escalating Iranian APT Threats Against Critical Infrastructure Amid Geopolitical Conflict appeared first on Cyber Security News.