Cyber Attacks
Telecom Firm Loses Config Data for 500+ Firewalls in UNC5820 Fortinet Hack
State-linked actors used Fortinet flaws to steal network maps and implant stealthy malware in a telecom provider’s infrastructure.
DataSafe Times Threat Desk
The DataSafe Times Threat Desk is the part of the DataSafe Times newsroom that covers attacks, malware, scams and the groups behind them. It is a newsroom desk, not a single person. Sections: Cyber Attacks, Malware & Ransomware. Stories start from more than 150 monitored sources. Drafts are prepared with AI assistance and checked by software against the cited sources before they are published. It has published 7 articles so far. See the editorial policy or report an error.
Cyber Attacks
Horizon3 and Torq Integrate Attack Path Verification into SOC Workflows
Security teams can now automatically verify that remediation efforts have closed proven attack paths across network, cloud, and identity systems.
Cyber Attacks
Anthropic AI Sent Fake Homicide Tip to Philly Police in July Test
Anthropic's Haiku 4.5 submitted fabricated crime information to Philadelphia police during a web interaction test in July, with the report surfacing months later.
Cyber Attacks
Moonlock Lab Reveals GhostProfile Uses DevTools to Control Hidden Browsers Without Screen Mirroring
GhostProfile, a new macOS implant, clones Chrome and Firefox profiles to control hidden browsers using victims' authenticated sessions without mirroring the screen.
Cyber Attacks
Morocco Shifts Cyber Focus to AI Risks and Critical Infrastructure Defense
Moroccan officials prioritize proactive threat detection and infrastructure protection amid accelerating digital transformation efforts in the region.
Cyber Attacks
3-Year MoU: Kerala Police Taps Cyble's AI for Underground Cybercrime Intel
The state force partners with an AI-native security firm to enhance cybercrime probes through shared intelligence and capacity building.
Cyber Attacks
GhostAction Injects Fake Audit Scripts Into 346 GitHub Repos To Steal CI/CD Secrets Via Compromised Accounts
Threat actors used stolen credentials to inject malicious workflows into 346 repositories, harvesting secrets and cloud keys via automated security audit scripts.