‘EchoLeak’ AI Attack Enabled Theft of Sensitive Data via Microsoft 365 Copilot
The user does not need to open the malicious email or click on any links.
The exploit, which Aim Security described as indirect prompt injection, is triggered when the victim asks Copilot for information referenced in the malicious email.
That is when Copilot executes the attacker’s instructions to collect information previously provided by the victim and send it to the attacker.
Cyber_Security_Channel
The user does not need to open the malicious email or click on any links.
The exploit, which Aim Security described as indirect prompt injection, is triggered when the victim asks Copilot for information referenced in the malicious email.
That is when Copilot executes the attacker’s instructions to collect information previously provided by the victim and send it to the attacker.
Cyber_Security_Channel
SecurityWeek
‘EchoLeak’ AI Attack Enabled Theft of Sensitive Data via Microsoft 365 Copilot
Microsoft recently patched CVE-2025-32711, a vulnerability that could have been used for zero-click attacks to steal data from Copilot.
😨11❤6
👨💻 Drive Faster Triage and Response in Your SOC
Made possible with real-time sandbox analysis from @anyrun_app.
The process is super simple:
Sign up with your business Email.
Click the following link.
-----
#ad #paidpromotion #sponsored
@Cyber_Security_Channel
Made possible with real-time sandbox analysis from @anyrun_app.
The process is super simple:
Sign up with your business Email.
Click the following link.
-----
#ad #paidpromotion #sponsored
@Cyber_Security_Channel
❤7👍4🔥3👎1
Zyxel Firewall Vulnerability Again in Attacker Crosshairs
The attacks were mainly aimed at targets in the US, the UK, Spain, Germany, and India.
The origin IPs, registered to Verizon Business infrastructure, were from the US, but GreyNoise notes that the true source of the attacks could have been spoofed, as the observed traffic was UDP, on port 500.
Cyber_Security_Channel
The attacks were mainly aimed at targets in the US, the UK, Spain, Germany, and India.
The origin IPs, registered to Verizon Business infrastructure, were from the US, but GreyNoise notes that the true source of the attacks could have been spoofed, as the observed traffic was UDP, on port 500.
Cyber_Security_Channel
SecurityWeek
Zyxel Firewall Vulnerability Again in Attacker Crosshairs
GreyNoise warns of a spike in exploitation attempts targeting a two-year-old vulnerability in Zyxel firewalls.
❤6
How CISOs Can Govern AI & Meet Evolving Regulations
Not long ago, the role of the chief information security officer (CISO) was well-defined: protect infrastructure, secure applications, safeguard customer data, manage risk, and ensure compliance across a growing partner ecosystem.
But as artificial intelligence (AI) transforms how enterprises operate, a new mandate has emerged: Govern its use responsibly, end to end.
Cyber_Security_Channel
Not long ago, the role of the chief information security officer (CISO) was well-defined: protect infrastructure, secure applications, safeguard customer data, manage risk, and ensure compliance across a growing partner ecosystem.
But as artificial intelligence (AI) transforms how enterprises operate, a new mandate has emerged: Govern its use responsibly, end to end.
Cyber_Security_Channel
Dark Reading
How CISOs Can Govern AI & Meet Evolving Regulations
Security teams are no longer just the last line of defense — they are the foundation for responsible AI adoption.
❤6
The Road to Agentic AI: Defining a New Paradigm for Technology and Cybersecurity
Not every AI system claiming to be agentic is.
As technology evolves at an unprecedented pace, distinguishing genuine agentic AI systems from those that merely capitalize on industry buzzwords has become increasingly challenging.
Defining what makes AI truly agentic is not just an exercise in classification — it is a critical step toward understanding the broader security implications of these systems.
Cyber_Security_Channel
Not every AI system claiming to be agentic is.
As technology evolves at an unprecedented pace, distinguishing genuine agentic AI systems from those that merely capitalize on industry buzzwords has become increasingly challenging.
Defining what makes AI truly agentic is not just an exercise in classification — it is a critical step toward understanding the broader security implications of these systems.
Cyber_Security_Channel
TrendAI
The Road to Agentic AI: Defining a New Paradigm for Technology and Cybersecurity | TrendAI (GB)
Our latest research provides a framework for understanding agentic AI systems, outlines their core characteristics, and examines the security implications surrounding their use.
❤3
⚡️China Breaks RSA Encryption With a Quantum Computer, Threatening Global Data Security
A 22‑bit key is trivially small compared with production‑grade RSA, yet the test matters because the approach scaled beyond past demonstrations that stopped at 19 bits and required more qubits per variable.
Cyber_Security_Channel
A 22‑bit key is trivially small compared with production‑grade RSA, yet the test matters because the approach scaled beyond past demonstrations that stopped at 19 bits and required more qubits per variable.
Cyber_Security_Channel
Earth.com
China breaks RSA encryption with a quantum computer, threatening global data security
If you logged onto your bank account this morning, the security protocols still seem secure - but things are changing quickly in the tech world. A team in…
🤯11❤4🔥3😱2
Chaos Ransomware Hits Optima Tax Relief, Leaks 69GB of Data
Optima Tax Relief has not released an official statement regarding the breach.
There has been no confirmation about whether law enforcement or federal agencies are involved in the investigation.
If you’ve ever used its services, assume your data could be at risk.
Cyber_Security_Channel
Optima Tax Relief has not released an official statement regarding the breach.
There has been no confirmation about whether law enforcement or federal agencies are involved in the investigation.
If you’ve ever used its services, assume your data could be at risk.
Cyber_Security_Channel
Fox News
Chaos ransomware hits Optima Tax Relief, leaks 69GB of data
The Chaos ransomware group breached Optima Tax Relief in a double-extortion attack, stealing sensitive customer case files and corporate documents with personal information.
❤4👍3
🚨 BRAODO Stealer abusing GitHub, obfuscated scripts dropping Remcos, BAT files delivering NetSupport RAT & more...
@anyrun_app publishes detailed breakdowns of the latest malware and phishing attacks every week.
Read about the top threats of June and gather threat intel for proactive defense — click on this link for the full material.
Want access to even more insights?
Subscribe here now.
-----
#ad #paidpromotion #sponsored
@Cyber_Security_Channel
@anyrun_app publishes detailed breakdowns of the latest malware and phishing attacks every week.
Read about the top threats of June and gather threat intel for proactive defense — click on this link for the full material.
Want access to even more insights?
Subscribe here now.
-----
#ad #paidpromotion #sponsored
@Cyber_Security_Channel
❤11👍6🔥3
Chrome 138, Firefox 140 Patch Multiple Vulnerabilities
Above update also fixes six medium-severity vulnerabilities leading to:
• The exposure of a persistent UUID to identify the browser.
• A lack of warning when opening files with the terminal extension.
• Policy bypass, phishing attacks on Android, security checks bypass, and cross-site scripting attacks.
Cyber_Security_Channel
Above update also fixes six medium-severity vulnerabilities leading to:
• The exposure of a persistent UUID to identify the browser.
• A lack of warning when opening files with the terminal extension.
• Policy bypass, phishing attacks on Android, security checks bypass, and cross-site scripting attacks.
Cyber_Security_Channel
SecurityWeek
Chrome 138, Firefox 140 Patch Multiple Vulnerabilities
Chrome 138 and Firefox 140 are rolling out with fixes for two dozen vulnerabilities, including high-severity memory safety issues.
❤2👍2
Cyberattack Targets International Criminal Court
The fresh attack occurred just as NATO leaders, including US President Donald Trump, were gathering in The Hague for a summit, and at a time the court is handling various high-profile cases, including arrest warrants.
Cyber_Security_Channel
The fresh attack occurred just as NATO leaders, including US President Donald Trump, were gathering in The Hague for a summit, and at a time the court is handling various high-profile cases, including arrest warrants.
Cyber_Security_Channel
SecurityWeek
Cyberattack Targets International Criminal Court
The International Criminal Court (ICC) has detected and contained a sophisticated and targeted cyberattack.
❤4
Scattered Spider Hacking Spree Continues With Airline Sector Attacks
The new attacks are consistent with Scattered Spider's pattern of constantly shifting industry targeting since bursting on to the threat landscape in 2022.
Multiple security vendors have described Scattered Spider as more of a loose collective rather than an organized group, consisting mostly 19 to 22 year old members who are native English speakers with a common interest in getting rich off of cybercrime.
Scattered Spider is one of several groups associated with "The Com," a decentralized community of young cybercriminals in the US, the UK, and Europe that primarily operates on platforms like Discord and Telegram.
Cyber_Security_Channel
The new attacks are consistent with Scattered Spider's pattern of constantly shifting industry targeting since bursting on to the threat landscape in 2022.
Multiple security vendors have described Scattered Spider as more of a loose collective rather than an organized group, consisting mostly 19 to 22 year old members who are native English speakers with a common interest in getting rich off of cybercrime.
Scattered Spider is one of several groups associated with "The Com," a decentralized community of young cybercriminals in the US, the UK, and Europe that primarily operates on platforms like Discord and Telegram.
Cyber_Security_Channel
Dark Reading
Scattered Spider Hacking Spree Flies Into Airline Sector
Microsoft has called the hacker collective, which previously hit major retailers and insurance companies, one of the most dangerous current cyber threats.
❤13
Twitter Co-Founder Jack Dorsey Just Launched A Messaging App That Doesn’t Need The Internet
The app, which utilizes blockchain technology and allows users to communicate via radio waves, Wi-Fi, or satellite connectivity, offers a decentralized alternative to traditional messaging platforms.
This innovative approach enables users to stay connected even in areas with limited or no internet access, promoting global communication and community building.
@Cyber_Security_Channel
The app, which utilizes blockchain technology and allows users to communicate via radio waves, Wi-Fi, or satellite connectivity, offers a decentralized alternative to traditional messaging platforms.
This innovative approach enables users to stay connected even in areas with limited or no internet access, promoting global communication and community building.
@Cyber_Security_Channel
Inc
Twitter Co-Founder Jack Dorsey Just Launched a Messaging App That Doesn’t Need the Internet
It's called Bitchat, and it's based on Bluetooth mesh networking. Here's what to know about Jack Dorsey's latest foray into messaging systems.
❤12🥰3
Ransomware Gang Hunters International Says It’s Shutting Down
The sudden decision to shut down has sparked speculation among cybersecurity experts, with some wondering if the group's claims are genuine or merely a ruse to avoid law enforcement attention.
Hunters International's activities had been closely monitored by authorities, and their alleged shutdown may indicate a significant development in the ongoing battle against ransomware threats.
@Cyber_Security_Channel
The sudden decision to shut down has sparked speculation among cybersecurity experts, with some wondering if the group's claims are genuine or merely a ruse to avoid law enforcement attention.
Hunters International's activities had been closely monitored by authorities, and their alleged shutdown may indicate a significant development in the ongoing battle against ransomware threats.
@Cyber_Security_Channel
TechCrunch
Ransomware gang Hunters International says it’s shutting down | TechCrunch
The cybercriminal group, which said it's releasing its decryption tools to victims, may be transitioning to new infrastructure under a different name.
❤5
Ransomware: Hunters International Is Not Actually Shutting Down, It's Rebranding
A Prodaft threat analyst known as 3xp0rt, who first spotted the group's takedown notice, told the Risky Business media outlet that the decryption keys are being made available via Hunters' backend.
"We have information that victims are required to log in to a portal mentioned in the ransom note using their existing credentials to obtain the decryption software," 3xp0rt said.
Cyber_Security_Channel
A Prodaft threat analyst known as 3xp0rt, who first spotted the group's takedown notice, told the Risky Business media outlet that the decryption keys are being made available via Hunters' backend.
"We have information that victims are required to log in to a portal mentioned in the ransom note using their existing credentials to obtain the decryption software," 3xp0rt said.
Cyber_Security_Channel
Infosecurity Magazine
Ransomware: Hunters International Is Not Shutting Down, It's Rebranding
Some admins of Hunters International are now part of the encryption-less cyber extortion group World Leaks
❤6
Pakistan’s First AI-Powered Cybersecurity Tool Launched
The tool utilizes machine learning algorithms to detect and respond to cyber threats in real-time, enhancing the country's cybersecurity posture.
By leveraging AI, the tool can analyze vast amounts of data, identify patterns, and predict potential threats, enabling proactive measures to be taken.
@Cyber_Security_Channel
The tool utilizes machine learning algorithms to detect and respond to cyber threats in real-time, enhancing the country's cybersecurity posture.
By leveraging AI, the tool can analyze vast amounts of data, identify patterns, and predict potential threats, enabling proactive measures to be taken.
@Cyber_Security_Channel
DAWN.COM
Pakistan’s first AI-powered cybersecurity tool launched
"Dexter" is able to provide cybersecurity information to human collaborators.
😁8🤣5🔥2
ℹ️ 16 Billion Passwords Exposed in Record-Breaking Data Breach
Happened a while back, maybe you missed it...
“This is not just a leak – it’s a blueprint for mass exploitation.
Cybercriminals now have unprecedented access to personal credentials that can be used for account takeover, identity theft, and highly targeted phishing.
What’s especially concerning is the structure and recency of these datasets – these aren’t just old breaches being recycled.
This is fresh, weaponizable intelligence at scale,” researchers said.
The leaked data includes login info for just about every online service you can think of.
We are talking:
- Apple
- GitHub
- Google
- Telegram
- Facebook
And even government platforms.
With 16 billion records floating around, it's safe to say almost nothing was left out.
Cyber_Security_Channel
Happened a while back, maybe you missed it...
“This is not just a leak – it’s a blueprint for mass exploitation.
Cybercriminals now have unprecedented access to personal credentials that can be used for account takeover, identity theft, and highly targeted phishing.
What’s especially concerning is the structure and recency of these datasets – these aren’t just old breaches being recycled.
This is fresh, weaponizable intelligence at scale,” researchers said.
The leaked data includes login info for just about every online service you can think of.
We are talking:
- Apple
- GitHub
- Telegram
And even government platforms.
With 16 billion records floating around, it's safe to say almost nothing was left out.
Cyber_Security_Channel
Cybernews
16 billion passwords exposed in record-breaking data breach: are you affected?
This is a colossal breach involving 16 billion exposed credentials (Google, Apple, Facebook) — possibly the G.O.A.T. of all data breaches.
❤10
President Lee Emphasizes Cybersecurity As Strategic Industry During Information Security Day
The event highlighted the importance of fostering a robust cybersecurity ecosystem, with President Lee underscoring the need for continued innovation and investment in this critical field.
By prioritizing cybersecurity, the nation can better protect its digital assets and promote economic growth.
@Cyber_Security_Channel
The event highlighted the importance of fostering a robust cybersecurity ecosystem, with President Lee underscoring the need for continued innovation and investment in this critical field.
By prioritizing cybersecurity, the nation can better protect its digital assets and promote economic growth.
@Cyber_Security_Channel
Chosun Biz
President Lee emphasizes cybersecurity as strategic industry during Information Security Day
President Lee emphasizes cybersecurity as strategic industry during Information Security Day
❤4
⚡️Louis Vuitton Data Breach Hits Customers in Several Countries
In Turkey, the company reported that the breach impacted nearly 143,000 residents.
The same statement reveals that the incident involved a compromised account related to a third-party service provider.
Cyber_Security_Channel
In Turkey, the company reported that the breach impacted nearly 143,000 residents.
The same statement reveals that the incident involved a compromised account related to a third-party service provider.
Cyber_Security_Channel
SecurityWeek
Louis Vuitton Data Breach Hits Customers in Several Countries
Louis Vuitton customers in the UK, South Korea, Turkey and possibly other countries are being notified of a data breach.
👍2❤1
Cybersecurity MBA Students Talk Tech, Business And Policy In D.C.
The event provided a platform for students to engage with industry experts and policymakers, discussing the latest trends and challenges in cybersecurity.
Through these interactions, students gained valuable insights into the intersection of technology, business, and policy in the field of cybersecurity.
@Cyber_Security_Channel
The event provided a platform for students to engage with industry experts and policymakers, discussing the latest trends and challenges in cybersecurity.
Through these interactions, students gained valuable insights into the intersection of technology, business, and policy in the field of cybersecurity.
@Cyber_Security_Channel
Florida International University
Cybersecurity MBA students talk tech, business and policy in D.C.
Two dozen participated in the immersive experience that included direct engagement with lawmakers, federal staffers and industry experts at the U.S. Capitol and the Institute of World Politics.
❤5👍1