2+ week, 2+ day ago   (471+ words) Aurora ransomware actors have been observed abusing SpaceX’s AI Cursor Agent as part of exploitation campaigns, according to a new study by Gambit Security’s Threat Intelligence team. The threat actors ran Claude Sonnet through Cursor Agent to assist with various…...

2+ week, 4+ day ago   (310+ words) A large-scale malware-spreading scheme targeting Minecraft players has continued to evolve despite the takedown of the threat actor’s malicious infrastructure in July. In a new report, researchers at McAfee shared that over 6300 attempts to access malicious sites linked to the…...

2+ week, 4+ day ago   (378+ words) ReliaQuest has released details of a ShinyHunters social engineering attack which it said briefly exposed its identity dashboard, but branded claims it was compromised or targeted by ransomware as “false.” The threat intelligence firm had been investigating a new campaign…...

2+ week, 5+ day ago   (385+ words) A financially motivated threat actor has been observed abusing free Notion accounts, malicious PDFs and device code phishing to harvest authentication tokens from targeted organizations. Sublime's Threat Intelligence & Research team, which tracks the actor as Doubloon Dredger, identified the activity…...

3+ week, 2+ day ago   (474+ words) Industrial control systems (ICS) operators have been warned that threat actors are using AI to target Siemens S7 Series programmable logic controllers (PLCs). Attackers are deploying AI to assist with a number of malicious objectives designed to compromise operational technology (OT)…...

3+ week, 2+ day ago   (330+ words) Security researchers have warned of a new variant of a prolific Android banking Trojan which substantially expands its potential victim count. ToxicPanda 2.0 was discovered by Zimperium’s zLabs team, the mobile security vendor wrote in a post on August 19. Most notable…...