Cybercrime

Jack & Jill went up the hill — and an AI tried to hack them

In a red-team test, CodeWall’s autonomous agent chained together four small bugs in the Jack & Jill hiring platform to gain admin access and probe its AI's defenses.

ClickFix attackers using new tactic to evade detection, says Microsoft

Unwitting victims are now being tricked into installing malware via Windows Terminal, but some experts say this is old news. Regardless, they agree that infosec leaders need to educate employees about the tactic.

Targeted advertising is also targeting malware

Cybersecurity should be as much about monitoring ad calls as securing fire-walls, according to a cybersecurity firm.

Iranian cyberattacks fail to materialize but threat remains acute

US-Israeli military attacks on Iran have caused a lull in cyberactivity, but Iranian groups will turn to destructive wiper attacks at some point, experts warn.

Huawei’s industry-leading ransomware protection solution first to be Tolly Group-certified

OAuth phishers make ‘check where the link points’ advice ineffective

Microsoft has identified a phishing campaign using malformed links to legitimate OAuth services to redirect to malware downloads.

New phishing campaign tricks employees into bypassing Microsoft 365 MFA

Unwitting employees register a hacker’s device to their account; the crook then uses the resulting OAuth tokens to maintain persistent access.