Defence
OnePlus OxygenOS root exploit disclosed
Researcher Rasmus Moorats chained two unpatched OnePlus software flaws to gain root access on an Android phone via a malicious app.
Defence
Defence on Zero Day Room: Patch management, Multi-factor authentication and phishing resistance, Backup and recovery that survives ransomware, Network segmentation, Endpoint detection and response and Logging and detection engineering.
Defence
Japan Dismantles North Korean Laptop Farm in WaterPlum Scheme
Japan, the US, Australia, and Germany detail a North Korean hiring scheme that stole over $10 million and infected 30,000 devices.
Defence
WaterPlum Hackers Stole $10.7 Million in Global Campaign
A North Korean hacking group compromised 30,000 devices worldwide over eight months, stealing over $10.7 million in cryptocurrency.
Defence
Settra Ransomware Targets Retail and Manufacturing
A new ransomware variant called Settra is attacking retail and manufacturing firms. According to Huntress, the malware uses RMM tools for persistence and disables victim recovery options.
Defence
KTH Researchers Train Agent to Reset OT Systems Under Attack
Researchers at KTH Royal Institute of Technology have developed an autonomous intrusion response agent for industrial control systems.
Defence
Gigabud Trojan Clones Banking Apps to Bypass Fraud Detection
The Gigabud Android banking trojan now uses a weaponized app cloner called Vwork to isolate fraudulent transactions in a separate work profile.
Defence
Stolen AI Session Tokens Bypass MFA in Infostealer Campaign
Threat actors are using stolen session tokens and API keys from infostealer logs to bypass multi-factor authentication and hijack AI service accounts.
Defence
Mars Security automates threat intelligence
Mars Security has launched a real-time detection capability that automatically converts threat advisories from sources like CISA and Mandiant into tested detection rules.
Defence
Liquid Network hackers keep $47 million after $320 million exploit
Hackers negotiated publicly with the Liquid Network cryptocurrency platform, returning $266.5 million of a $320 million exploit but keeping $47 million as a reward.
Defence
Doppler Secrets Platform Secures AI Agents and Pipelines
Doppler's secrets management platform centralizes credentials for developers, CI/CD pipelines, and AI agents.
Defence
Teleport's Chris Webber on securing zero trust AI agents
Teleport's Chris Webber argues traditional zero trust principles are insufficient for AI agents.
Defence
RMM Phishing Campaign Targets US, Spans 46 Countries
A global phishing campaign using fake documents to deploy legitimate remote monitoring and management software has made the United States its primary target.
Defence
REVSTEALER Leaves Four Modules to Disable Windows Security
Elastic Security Labs has identified four new programs linked to the REVSTEALER infostealer that persist after the main malware deletes itself.
Defence
MikroTik Routers Hijacked via Internet-Exposed SSH
Attackers are exploiting MikroTik routers with internet-exposed SSH services to gain full administrative control without authentication.
Defence
AIR Security launches AI agent firewall with $50M funding
AIR Security has emerged from stealth with $50 million in funding and a new firewall product designed to secure AI agents and their add-ons.
Defence
Thomson Reuters breach exposes US and Canadian court data
A breach of Thomson Reuters' C-Track court management platform exposed sealed records and personal data from courts in at least 12 U.S. States, the U.S.