Help Net Security جمعه ۸ آبان ۱۴۰۵ · ۱۰:۰۰

Fake IT help desk callers got by on little more than names and email addresses

Attackers posing as IT help desk staff contacted employees by phone, email and Microsoft Teams in the third quarter of 2026 and talked them into opening remote access sessions, Cisco Talos Incident Response (Talos IR) found across several engagements. In one case, that access ended in ransomware. They knew names and email addresses “The attackers appeared to know employee names and email addresses, as they contacted…

بدافزار و آلودگی فیشینگ باج‌افزار پاسخ به رخداد و جرم‌یابی

خواندن متن کامل در Help Net Security درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←

Microsoft Security Blog شنبه ۹ آبان ۱۴۰۵ · ۰۴:۳۲

Inside a malicious Claude Code-branded extension and its persistent SSH backdoor

Microsoft analyzes a malicious Claude Code–branded extension, its persistent SSH backdoor, and guidance to detect and remediate it. The post Inside a malicious Claude Code-branded extension and its persistent SSH backdoor appeared first on Microsoft Security Blog.

بدافزار و آلودگی امنیت زنجیره تأمین

منبع

Security Affairs شنبه ۹ آبان ۱۴۰۵ · ۰۰:۵۲

Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries

Yoba malware uses fake ChatGPT and Claude apps to sideload malware through signed installers and deploy a cryptocurrency miner. Check Point Research has spent two months tracking a campaign it calls Yoba, which uses the popularity of AI tools to spread a custom malware chain. The attackers build fake GitHub projects that pose as AI […]

بدافزار و آلودگی امنیت هوش مصنوعی هوش مصنوعی و یادگیری ماشین

منبع

Wired Security شنبه ۹ آبان ۱۴۰۵ · ۰۰:۰۸

A Supply Chain Attack Put Malicious Anthropic Claude Extensions on Thousands of Devices

Thanks to a lucky break, flawed code in a tainted Claude extension prevented the attacker from fully worming their way into some 5,000 developer machines.

بدافزار و آلودگی امنیت زنجیره تأمین

منبع

Cloudflare Blog جمعه ۸ آبان ۱۴۰۵ · ۲۱:۰۸

4 real? Tracking exploitation and patching of eMudhra’s weak keys

Four, just four: that’s the key to break into any unpatched connection on the Internet that is using eMudhra certificates. Here’s how we quickly patched Cloudflare, what evidence we can see of attempted exploitation, and how much of the rest of the Internet remains exposed.

آسیب‌پذیری و روز صفر رمزنگاری پاسخ به رخداد و جرم‌یابی

منبع