AI Security Roundup

Microsoft has disclosed details of a large-scale credential theft campaign that has leveraged a combination of code of conduct-themed lures and legitimate email services to direct users to …

ISC Stormcast For Tuesday, May 5th, 2026 https://isc.sans.edu/podcastdetail/9918

TeamPCP Weekly Analysis: 2026-W18 (2026-04-27 through 2026-05-03) Published 2026-05-04. Last Updated 2026-05-04 17:12:18 UTC by Kenneth Hartman (Version: 1) 0 comment(s) Summary The most significant …

** Ravie Lakshmanan ** May 04, 2026 Vulnerability / Enterprise Software Progress Software has released updates to address two security flaws in MOVEit Automation, including a critical bug that could …

** Ravie Lakshmanan ** May 04, 2026 Network Security / Endpoint Security An active phishing campaign has been observed targeting multiple vectors since at least April 2025, with legitimate Remote …

This week, I will release a few updates to our DShield honeypot. The update should happen automatically if you have “automatic updates” enabled on your system. There will be two major …

** Ravie Lakshmanan ** May 04, 2026 Cybersecurity / Hacking This week, the shadows moved faster than the patches. While most teams were still triaging last month’s alerts, attackers had already turned …

The China-based cybercrime group known as Silver Fox has been linked to a new campaign targeting organizations in Russia and India with a new malware called ABCDoor . The activity involved using …

** Ravie Lakshmanan ** May 04, 2026 Vulnerability / Network Security A previously unknown threat actor has been observed targeting government and military entities in Southeast Asia, alongside a …

On December 4, 2025, a 17-year-old was arrested in Osaka under Japan’s Unauthorized Access Prohibition Act. The young man had run malicious code to extract the personal data of over 7 million users of …

Hacking Polymarket Polymarket is a platform where people can bet on real-world events, political and otherwise. Leaving the ethical considerations of this aside (for one, it facilitates assassination …

A coordinated international operation involving U.S. and Chinese authorities has arrested at least 276 suspects and shut down nine scam centers used for cryptocurrency investment fraud schemes …

ISC Stormcast For Monday, May 4th, 2026 https://isc.sans.edu/podcastdetail/9916

Wireshark 4.6.5 Released Published 2026-05-03. Last Updated 2026-05-03 16:49:04 UTC by Didier Stevens (Version: 1) 0 comment(s) Wireshark release 4.6.5 fixes 43 vulnerabilities (38 CVEs) and 35 bugs. …

** Ravie Lakshmanan ** May 03, 2026 Vulnerability / Container Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a recently disclosed security flaw impacting …

** Ravie Lakshmanan ** May 02, 2026 Data Breach / Enterprise Security Cybersecurity company Trellix has announced that it suffered a breach that enabled unauthorized access to a “portion” …

Introduction As macbooks and mac minis become more popular, we’re seeing more campaigns targeting these macOS hosts. Malicious ads have popped up in search results that can lead potential …

ISC Stormcast For Friday, May 1st, 2026 https://isc.sans.edu/podcastdetail/9914

** Ravie Lakshmanan ** May 01, 2026 Supply Chain Attack / Malware A new software supply chain attack campaign has been observed using sleeper packages as a conduit to subsequently push malicious …

A Ransomware Negotiator Was Working for a Ransomware Gang Someone pleaded guilty to secretly working for a ransomware gang as he negotiated ransomware payments for clients. Tags: cybercrime , …

** Ravie Lakshmanan ** May 01, 2026 Data Breach / Law Enforcement The U.S. Department of Justice (DoJ) on Thursday announced the sentencing of two cybersecurity professionals to four years each in …

The managed security services market is projected to grow from $38.31 billion in 2025 to $69.16 billion by 2030 [1] , with cybersecurity being the fastest-growing sector [2] . Despite this …

** Ravie Lakshmanan ** May 01, 2026 Malware / Social Engineering Cybersecurity researchers are warning of two cybercrime groups that are carrying out “rapid, high-impact attacks” operating …

Cybersecurity researchers have disclosed details of a new China-aligned espionage campaign targeting government and defense sectors across South, East, and Southeast Asia, along with one European …

** Ravie Lakshmanan ** May 01, 2026 Malware / Threat Intelligence A newly discovered Vietnamese-linked operation has been observed using a Google AppSheet as a “phishing relay” to …