The Scattered Spider ransomware gang has been grabbing headlines with a string of bold and high-profile cyber attacks. But researchers with Google's Threat Intelligence Group (GTIG) now believe that some of these attacks may have been misattributed, and that the similarly long-tenured ShinyHunters group may have instead been the culprits.
A new theoretical attack described by researchers with LayerX lays out how frighteningly simple it would be for a malicious or compromised browser extension to intercept user chats with LLMs and insert prompt injection attacks designed to exfiltrate data without the target being aware.
Aeroflot canceled 54 of its 260 scheduled flights for the day due to the cyber attack, and an undetermined number of others experienced some amount of delay. 22 outbound flights from Moscow were subsequently canceled the following day, along with 31 incoming flights operated by subsidiary Rossiya Airlines.
Allianz Life Insurance Company of North America (Allianz Life) is notifying 1.4 million customers, financial professionals, and employees of a data breach that leaked their personal information via a third-party CRM platform.
A U.S. nuclear agency was among the victims of the SharePoint vulnerability chain, which was exploited to compromise over 54 organizations across the United States, Europe, and Asia.
Dell has confirmed a security breach after the World Leaks ransomware cyber gang leaked 1.3 terabytes of data allegedly stolen from the company’s infrastructure.
The massive 2023 cyber attack on Clorox can be traced to a negligent help desk employee at longtime contractor Cognizant, according to a new lawsuit filed by the company. Clorox is seeking a total sum of $380 million for breach of contract, lost sales and reputational damage, with $49 million of that in direct remediation.
Restrictions on ransomware payments have become common for government agencies around the world, but it is still fairly rare to see them extended to the public sector or local levels of government. The new UK rules would additionally require all business types that are not impacted to notify the government.
A ransomware attack affecting Russian vodka producer Novabev disrupted its internal IT systems, shutting down over 2,000 liquor stores, including...
Vibe coding AI Replit put out some bad vibes by hallucinating components that it added to a project on its own, such as a database of 4,000 fictional people, ignored repeated orders, and eventually deleting an entire database.










