همه اخبار

FortiBleed is still active, with attackers locking admins out of Fortinet firewalls

Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance

AI Threat Report: How Artificial Intelligence Is Used Across Illicit Communities

A monthly analysis of how artificial intelligence is used in illicit communities, based on Flashpoint proprietary intelligence and direct visibility into real threat actor environments. The post AI Threat Report: How Artificial Intelligence Is Used Across Illicit Communities appeared first on Flashpoint.

CrocoRat Adds a New Twist to ClickFix with DNS Payload Delivery

Blinder Tunnel Campaign Targets Iraqi Infrastructure

The AI app builder your team trusts has a root-level backdoor

AI accelerates n-day attacks, as flaw disclosures and exploits double

U.S. Bank CISO says the security role keeps growing and no one can own all of it

ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits

Dell patches 18 critical flaws that could hand attackers the keys to storage and Kubernetes

ShinyHunters’ exploitation of a new PeopleSoft zero-day hole threatens to change enterprise risk dynamics

Despite ShinyHunters arrests after FBI jobs data breach, enterprises still have no answers about PeopleSoft risks

5th October – Threat Intelligence Report

Exposed Agent Keys Can Become a Route into Infrastructure: What Leaked AI and MCP Credentials Actually Expose

Citrix warns of actively exploited NetScaler flaw days after zero-day patch rush

Trust at Machine Speed: Securing the New Cyber Order in the Age of Agentic AI

Warlock Ransomware Still Exploits Year-Old SharePoint Flaws to Hit Critical Infrastructure

Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware

Antino Backdoor Lets China-Linked UAT-11587 Turn Microsoft 365 Into a C2 Channel

Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign

Threat Intelligence RoundUp: September

Osavul Lands $10 Million to Spot Hostile Intent Across Cyber, Physical Domains

From Access to Exfiltration: What Defenders Need to Know

Ransomware Risk Model: Flashpoint’s Patented Scoring Method to Inform Vulnerability Prioritization

What a Spanish Carding Tutorial Reveals About How Fraudsters Actually Think

Warlock Ransomware Hits Large Spanish, Portuguese Orgs

Hallucinating Credibility: China-Aligned TA419 Impersonates its Way into US AI Policy Circles

MSP360 RMM Abused in Phishing Campaigns to Deploy ScreenConnect

The vulnerabilities AI finds are the ones attackers want

Russia's Star Blizzard Ditches ClickFix to Widen Phishing Net