-
6 days ago | 
scworld.com | Laura French
The Guam Memorial Hospital Authority (GMHA) was fined $25,000 after two cyber incidents, including a ransomware attack, led to potential violations of the Health Insurance Portability and Accountability Act of 1996 (HIPAA).
-
1 week ago | 
scworld.com | Laura French
Identity-based cyberattacks made up nearly a third of intrusions in 2024, while the delivery of infostealers by email increased a dramatic 84%, according to the IBM X-Force 2025 Threat Intelligence Index published Thursday. The report revealed that 30% of intrusions involve the misuse of valid credentials, marking the second year in a row that valid logins tied with exploitation of public-facing applications as the top initial access vector.
-
1 week ago | 
scworld.com | Laura French
A Microsoft Teams phishing campaign, leveraging techniques commonly used in Black Basta ransomware attacks, was found to spread a unique PowerShell backdoor in recent attacks, ReliaQuest reported Friday. The March 2025 malware campaign also leveraged a persistence tactic never before seen in the wild, according to ReliaQuest, in which the Windows Type Library (TypeLib) is hijacked to redirect component object models (COM objects) to malicious files.
-
2 weeks ago | 
scworld.com | Laura French
Scattered Spider, a hacker collective behind several high-profile attacks against large U.S. brands, continues to operate with new strategies in 2025 despite a series of 2024 arrests, according to Silent Push. The group’s latest tactics, techniques and procedures (TTPs), indicators and compromise (IoCs) and activities were outlined in a Silent Push blog post published Monday.
-
2 weeks ago | 
scworld.com | Laura French
A malicious AI tool that claims to offer advanced capabilities without the need for jailbreaks was discovered by SlashNext researchers, according to a blog post published Monday. Xanthorox AI, which was first spotted on dark web cybercrime forums in Q1 2025, purports to offer five models specifically designed to aid malicious activity. These models include Xanthoroxv4, Xanthorox Coder, Xanthorox Vision and Xanthorox Reasoner Advanced, as well as a real-time voice mode and search capabilities.
-
2 weeks ago | 
scworld.com | Laura French
An amateur hacker’s operational security error enabled researchers to uncover more details about a cybercrime operation utilizing the Proton66 bulletproof hosting service, DomainTools reported Thursday. The threat actor known as “Coquettte” was uncovered by DomainTools while investigating domains hosted by Proton66.
-
3 weeks ago | 
scworld.com | Laura French
An attack campaign using DeepSeek, AutoCAD, UltraViewer and other business apps as phishing lures was found spreading three different backdoors for remote access to victims’ systems, Kaspersky revealed in a blog post Wednesday. One of the malware strains, known as TookPS, was previously discovered by Kaspersky in March, when fake DeepSeek pages were leveraged to spread the backdoor. The DeepSeek phishing page gained exposure through posts on X, one of which received about 1.2 million views.
-
2 months ago | 
msn.com | Laura French
Microsoft Cares About Your PrivacyMicrosoft and our third-party vendors use cookies to store and access information such as unique IDs to deliver, maintain and improve our services and ads. If you agree, MSN and Microsoft Bing will personalise the content and ads that you see. You can select ‘I Accept’ to consent to these uses or click on ‘Manage preferences’ to review your options and exercise your right to object to Legitimate Interest where used.
-
2 months ago | 
twincities.com | Laura French
The most valuable feature of your lake home may well be the view. Lake lots with southern or western exposure command premium prices, according to Ed Northway, a custom builder in the Brainerd lakes area. Maximizing the view will also maximize your lake home’s appeal. That’s why doors, windows, and window coverings are all critical choices. Northway (yes, that’s his real name) says that many people assume that “a wall of glass two stories high” is the best design solution.
-
Jan 24, 2025 | 
msspalert.com | Jeffrey Burt |Laura French
Malicious actors have been warming up to the new GhostGPT generative AI tool touted as "uncensored AI" facilitating a generation of malware code and phishing emails, with ads on cybercrime forums garnering thousands of views, reports SC Media. Abnormal Security researchers said GhostGPT, which features a stringent no-logs policy and enables Telegram bot access, crafts a convincing phishing email template from Docusign when prompted.
