Israel and Iran may be in a hidden cyber war with both countries attacking each other’s critical infrastructure, causing physical disruptions to the civilian population.
Russian software company presented itself as being US-based and provides code that assists app developers in tracking user online activity. About 8,000 Android and iOS apps, available through the official app stores, make use of it.
Called the "Policy Puppetry Attack," the new prompt injection attack focuses on formatting requests to look like the contents of one of the policy files that AI models rely on for their security and safety guidelines.
TeleMessage provides secure archiving services for a variety of messaging apps, including Telegram and WhatsApp. In this case, the security breach is of an unofficial Signal clone that parent company Smarsh offers called "TM SGNL."
Security flaw exposes the firmware encryption key allowing attackers to run arbitrary code on Intel Management Engine and access TPM, BitLocker, and EPID encryption keys.
Retailer WH Smith suffered a cyber attack that leaked employee data, including names, dates of birth, and National Insurance Numbers. The incident leaked the data of current and former employees, but customer data was unaffected.
Global shipping company Hipshipper used by Amazon, eBay, and Shopify sellers has suffered a data leak exposing over 14 million shipping records containing personal information.
Hive ransomware group claimed responsibility for the cyber attack on Tata Power and began leaking stolen data, including sensitive employee and company information after ransom negotiations had conclusively failed.
Hive ransomware, one of the biggest ransomware-as-a-service (RaaS) strains circulating since 2021, has at this point brought in $100 million in ransom payments and the total victim count is at least 1,300 organizations.
The Hive ransomware threat appears to be very much in retreat as the US Department of Justice recently announced the seizure of the group's decryption keys and infrastructure, including its public-facing website, by law enforcement operations.
