Dark Web Profile: CyberXero

CyberXero is a Russian-speaking, financially motivated Initial Access Broker (IAB) active on Dark Web forums, including Dread and HackForums. The actor runs two parallel operations: an opportunistic global campaign that mass-exploits WordPress, Magento and other e-commerce platforms for access and payment data, and a directed campaign that conducts curated reconnaissance against Ukrainian energy and utilities […]

هوش تهدید
خواندن متن کامل در SOCRadar درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
CSO Online

Rewriting less than 10 neurons in an LLM can turn it into a sleeper backdoor

Microsoft researchers have found that rewriting fewer than 10 rarely used neurons in an open-weight AI model can turn any agent built on it into a sleeper backdoor that runs an attacker’s commands on cue, with no retraining required. Researchers from Microsoft Research and Microsoft Red Team described the technique called Lazarus in a research paper. It modifies dormant neurons in a model’s final feed-forward layer t…

Flashpoint

Inside the Fraud Underground: Key Takeaways for Retail and Financial Services Teams

In our latest webinar, Flashpoint analysts explore the underground markets, stolen credentials, and illicit services fueling financial and retail fraud, from account takeover and refund fraud to emerging cash-out methods. The post Inside the Fraud Underground: Key Takeaways for Retail and Financial Services Teams appeared first on Flashpoint.

آی‌تی‌آنالیز

تداوم حملات سایبری ایران به زیرساخت‌های آمریکا

آزاده کیاپور - در تاریخ ۷ آوریل، در حالی ‌که عملیات «خشم حماسی» در سی‌وهشتمین روز خود قرار داشت، آژانس امنیت سایبری و زیرساخت آمریکا (CISA)، نسبت به نفوذ بازیگران سایبری وابسته به ایران به کنترل‌گرهای منطقی قابل برنامه‌ریزی (PLCs) هشدار داد. The post تداوم حملات سایبری ایران به زیرساخت‌های آمریکا appeared first on آی تی آنالیز.

SOCRadar

CVE-2026-125350: Google Fixes Exploited Chrome XML Zero-Day

Google has patched CVE-2026-125350, a high-severity use-after-free in Chrome’s XML handling that attackers are already exploiting. The fix landed in the Stable channel on November 9, 2026, three days after an anonymous researcher reported the bug. Google says it is aware that an exploit for CVE-2026-125350 exists in the wild. It is the eighth exploited […]