Suspected Scattered Spider Hacker Pleads Guilty

A 20-year-old arrested last year and charged alongside others believed to be members of Scattered Spider has pleaded guilty.

The post Suspected Scattered Spider Hacker Pleads Guilty appeared first on SecurityWeek.

SecurityWeek – ​Read More

PoisonSeed Exploits CRM Accounts to Launch Cryptocurrency Seed Phrase Poisoning Attacks

A malicious campaign dubbed PoisonSeed is leveraging compromised credentials associated with customer relationship management (CRM) tools and bulk email providers to send spam messages containing cryptocurrency seed phrases in an attempt to drain victims’ digital wallets.
“Recipients of the bulk spam are targeted with a cryptocurrency seed phrase poisoning attack,” Silent Push said in an

The Hacker News – ​Read More

White House reportedly blames auto-suggested iPhone contact for Signal scandal

How did Atlantic editor-in-chief Jeffrey Goldberg get added to a Signal group chat with Trump administration officials discussing their plans for an airstrike in Yemen? The simplest explanation: National Security Adviser Mike Waltz had Goldberg saved as a contact in his phone and accidentally added him. Indeed, when Waltz first claimed that Goldberg’s phone number […]

Security News | TechCrunch – ​Read More

Why neglecting AI ethics is such risky business – and how to do AI right

Companies that combine innovation and trust have a competitive edge. Discover the best practices that ensure ethical, sustainable deployment.

Latest stories for ZDNET in Security – ​Read More

Microsoft Credits EncryptHub, Hacker Behind 618+ Breaches, for Disclosing Windows Flaws

A likely lone wolf actor behind the EncryptHub persona was acknowledged by Microsoft for discovering and reporting two security flaws in Windows last month, painting a picture of a “conflicted” individual straddling a legitimate career in cybersecurity and pursuing cybercrime.
In a new extensive analysis published by Outpost24 KrakenLabs, the Swedish security company unmasked the up-and-coming

The Hacker News – ​Read More

North Korean Hackers Deploy BeaverTail Malware via 11 Malicious npm Packages

The North Korean threat actors behind the ongoing Contagious Interview campaign are spreading their tentacles on the npm ecosystem by publishing more malicious packages that deliver the BeaverTail malware, as well as a new remote access trojan (RAT) loader.
“These latest samples employ hexadecimal string encoding to evade automated detection systems and manual code audits, signaling a variation

The Hacker News – ​Read More

NSA Chief Ousted Amid Trump Loyalty Firing Spree

Plus: Another DOGE operative allegedly has a history in the hacking world, and Donald Trump’s national security adviser apparently had way more Signal chats than previously known.

Security Latest – ​Read More

Malicious Python Packages on PyPI Downloaded 39,000+ Times, Steal Sensitive Data

Cybersecurity researchers have uncovered malicious libraries in the Python Package Index (PyPI) repository that are designed to steal sensitive information.
Two of the packages, bitcoinlibdbfix and bitcoinlib-dev, masquerade as fixes for recent issues detected in a legitimate Python module called bitcoinlib, according to ReversingLabs. A third package discovered by Socket, disgrasya, contained a

The Hacker News – ​Read More

Maryland pharmacist used keyloggers to spy on coworkers for a decade, victim alleges

A Maryland pharmacist installed spyware on hundreds of computers at a major teaching hospital and recorded videos of staff over the course of a decade, a class-action lawsuit alleges.

The Record from Recorded Future News – ​Read More

Cisco: Fine-tuned LLMs are now threat multipliers—22x more likely to go rogue

Cisco Reveals Fine-Tuned LLMs Evade Controls, Mimic Insider Threats With 22x More Success


Cisco warns LLMs fine-tuned for business are now being weaponized. Guardrails aren’t failing. They’re being engineered around.Read More

Security News | VentureBeat – ​Read More