BlackSuit Ransomware Group Transitioning to ‘Chaos’ Amid Leak Site Seizure
The BlackSuit ransomware gang targeted organizations across numerous industries, including education, government, healthcare, IT, manufacturing, and retail, stealing their data before encryption, to leverage it for extortion.
Cyber_Security_Channel
The BlackSuit ransomware gang targeted organizations across numerous industries, including education, government, healthcare, IT, manufacturing, and retail, stealing their data before encryption, to leverage it for extortion.
Cyber_Security_Channel
SecurityWeek
BlackSuit Ransomware Group Transitioning to ‘Chaos’ Amid Leak Site Seizure
The emerging Chaos ransomware appears to be a rebranding of BlackSuit, which had its leak site seized by law enforcement.
👍4❤1👎1
Self-Propagating Malware Spreading Via WhatsApp, Targets Brazilian Users
Trend's continued monitoring reveals a campaign that not only destabilizes individual users and companies but also offers a blueprint for similar attacks globally.
This blog serves as an urgent call to elevate awareness, deploy modern defensive tactics, and proactively monitor heavily used communications channels.
Cyber_Security_Channel
Trend's continued monitoring reveals a campaign that not only destabilizes individual users and companies but also offers a blueprint for similar attacks globally.
This blog serves as an urgent call to elevate awareness, deploy modern defensive tactics, and proactively monitor heavily used communications channels.
Cyber_Security_Channel
TrendAI
Self-Propagating Malware Spreading Via WhatsApp, Targets Brazilian Users | TrendAI (US)
TrendAI™ Research has identified an active campaign spreading via WhatsApp through a ZIP file attachment. When executed, the malware establishes persistence and hijacks the compromised WhatsApp account to send copies of itself to the victim's contacts.
❤4👍1👏1
TSA Solicits AI, Other Tech Solutions To Streamline Airport Screening
The Transportation Security Administration (TSA) is seeking private sector solutions to modernize airport screening using artificial intelligence (AI), biometrics, and automation.
The agency aims to enhance security effectiveness, reduce manual labor, and improve passenger experience.
Key focus areas include AI-powered threat detection, biometric identity verification, automated screening lanes, and remote screening capabilities.
📸 Image Credit: Yahoo
@Cyber_Security_Channel
The Transportation Security Administration (TSA) is seeking private sector solutions to modernize airport screening using artificial intelligence (AI), biometrics, and automation.
The agency aims to enhance security effectiveness, reduce manual labor, and improve passenger experience.
Key focus areas include AI-powered threat detection, biometric identity verification, automated screening lanes, and remote screening capabilities.
📸 Image Credit: Yahoo
@Cyber_Security_Channel
👍4❤2
⚡️FBI and French Police Shutter BreachForums Domain Again
This means the seizure will do little to stop the ongoing extortion of victims of the recent Salesforce campaign.
Scattered Lapsus$ Hunters claims to have over one billion records in its possession, and provided an October 10 deadline to negotiate.
Cyber_Security_Channel
This means the seizure will do little to stop the ongoing extortion of victims of the recent Salesforce campaign.
Scattered Lapsus$ Hunters claims to have over one billion records in its possession, and provided an October 10 deadline to negotiate.
Cyber_Security_Channel
Infosecurity Magazine
FBI and French Police Shutter BreachForums Domain Again
The infamous BreachForums site has been taken offline again to disrupt Scattered Lapsus$ Hunters
👍4❤1
Microsoft Patches 173 Vulnerabilities, Including Exploited Windows Flaws
Microsoft’s October 2025 cumulative update for Windows systems removes the vulnerable ltmdm64.sys driver, which is also impacted by CVE-2025-24052, an elevation of privilege weakness for which a proof-of-concept (PoC) exploit exists.
Cyber_Security_Channel
Microsoft’s October 2025 cumulative update for Windows systems removes the vulnerable ltmdm64.sys driver, which is also impacted by CVE-2025-24052, an elevation of privilege weakness for which a proof-of-concept (PoC) exploit exists.
Cyber_Security_Channel
SecurityWeek
Microsoft Patches 173 Vulnerabilities, Including Exploited Windows Flaws
The tech giant has rolled out fixes for 173 CVEs, including five critical-severity security defects.
❤6👍4
Microsoft: Russia, China Increasingly Using AI to Escalate Cyberattacks on the US
Increasingly, these attackers are using AI to target governments, businesses and critical systems like hospitals and transportation networks, according to Amy Hogan-Burney, Microsoft’s vice president for customer security and trust, who oversaw the report.
Many U.S. companies and organizations, meanwhile, are getting by with outdated cyber defenses, even as Americans expand their networks with new digital connections.
Cyber_Security_Channel
Increasingly, these attackers are using AI to target governments, businesses and critical systems like hospitals and transportation networks, according to Amy Hogan-Burney, Microsoft’s vice president for customer security and trust, who oversaw the report.
Many U.S. companies and organizations, meanwhile, are getting by with outdated cyber defenses, even as Americans expand their networks with new digital connections.
Cyber_Security_Channel
SecurityWeek
Microsoft: Russia, China Increasingly Using AI to Escalate Cyberattacks on the US
The U.S. is the top target for cyberattacks, with criminals and foreign adversaries targeting companies, governments and organizations.
❤6💩3
🚨 FunkLocker, an AI-powered Ransomware Strain by the FunkSec APT Group, Linked to 120+ Attacks Against Orgs in North America and Asia
Key takeaways from the analysis:
🔹 FunkSec strains use “AI snippet” coding patterns, making them easy to build but inconsistent in quality.
🔹 FunkLocker forcibly terminates processes and destabilizes systems to achieve full disruption.
🔹 Attackers leverage taskkill.exe, sc.exe, net.exe, and PowerShell to disable defenses and stage encryption.
🔹 Weak operational security, including reused BTC wallets and hardcoded keys, enabled public decryptors.
Click on this link to read the full technical analysis and gather TTPs.
For more insights on the latest malware and phishing attacks, follow @anyrun_app.
-----
#ad #paidpromotion #sponsored
@Cyber_Security_Channel
Key takeaways from the analysis:
🔹 FunkSec strains use “AI snippet” coding patterns, making them easy to build but inconsistent in quality.
🔹 FunkLocker forcibly terminates processes and destabilizes systems to achieve full disruption.
🔹 Attackers leverage taskkill.exe, sc.exe, net.exe, and PowerShell to disable defenses and stage encryption.
🔹 Weak operational security, including reused BTC wallets and hardcoded keys, enabled public decryptors.
Click on this link to read the full technical analysis and gather TTPs.
For more insights on the latest malware and phishing attacks, follow @anyrun_app.
-----
#ad #paidpromotion #sponsored
@Cyber_Security_Channel
❤10👍3🔥2🥰2👎1
$722.5 Billion in Sight for the UK as it Becomes the First Country in the World to Achieve Fitting a Quantum Computer into a Laptop
London-based startup Quantum Motion has successfully developed the world’s first complete quantum computer using CMOS silicon semiconductor technology.
This approach leverages the same manufacturing processes used for everyday electronic devices, including smartphones and laptops.
The system operates using silicon qubits etched onto 300-millimeter wafers, identical to conventional chip production methods.
Cyber_Security_Channel
London-based startup Quantum Motion has successfully developed the world’s first complete quantum computer using CMOS silicon semiconductor technology.
This approach leverages the same manufacturing processes used for everyday electronic devices, including smartphones and laptops.
The system operates using silicon qubits etched onto 300-millimeter wafers, identical to conventional chip production methods.
Cyber_Security_Channel
Evidence Network
$722.5 billion in sight for the UK as it becomes the first country in the world to achieve the feat of fitting a quantum computer…
The UK has achieved a groundbreaking milestone in quantum computing technology, establishing itself as the global pioneer in developing a compact quantum computer that fits ... Read more
❤10👍3
Throwback №1: Jaguar Land Rover production ‘severely disrupted’ by cyberattack
A statement from the firm read: “JLR has been impacted by a cyber incident. We took immediate action to mitigate its impact by proactively shutting down our systems.
Cyber_Security_Channel
A statement from the firm read: “JLR has been impacted by a cyber incident. We took immediate action to mitigate its impact by proactively shutting down our systems.
Cyber_Security_Channel
The Independent
Jaguar Land Rover production ‘severely disrupted’ by cyberattack
The car manufacturer said there is currently no evidence to suggest customer data has been stolen
👍5❤1
OpenAI Atlas Omnibox Is Vulnerable to Jailbreaks
The danger with jailbreaks comes from them being a process methodology rather than an isolated bug.
Once the process is discovered, the potential for abuse is limited only by the attacker’s imagination and skill.
But there are three immediate implications: the successful process can override user intent, can trigger cross-domain actions, and can bypass safety layers.
Cyber_Security_Channel
The danger with jailbreaks comes from them being a process methodology rather than an isolated bug.
Once the process is discovered, the potential for abuse is limited only by the attacker’s imagination and skill.
But there are three immediate implications: the successful process can override user intent, can trigger cross-domain actions, and can bypass safety layers.
Cyber_Security_Channel
SecurityWeek
OpenAI Atlas Omnibox Is Vulnerable to Jailbreaks
Researchers have discovered that a prompt can be disguised as an url, and accepted by Atlas as an url in the omnibox.
❤6👍1
Throwback №2: JLR Extends Production Halt After Cyber-Attack
The cause of the disruption lies in the fact that modern automotive manufacturers operate a ‘just-in-time’ logistics and parts supply strategy.
Rather than stockpiling parts, interconnected third party systems receive updates for stock deliveries for vehicles that are being manufactured at the JLR sites.
Some small businesses within the wider JLR supply chain rely solely on JLR for contracts.
Cyber_Security_Channel
The cause of the disruption lies in the fact that modern automotive manufacturers operate a ‘just-in-time’ logistics and parts supply strategy.
Rather than stockpiling parts, interconnected third party systems receive updates for stock deliveries for vehicles that are being manufactured at the JLR sites.
Some small businesses within the wider JLR supply chain rely solely on JLR for contracts.
Cyber_Security_Channel
Infosecurity Magazine
JLR Extends Production Halt After Cyber-Attack
Jaguar Land Rover (JLR) has confirmed that its pause in production will last until at least Wednesday, September 24
❤3👍2
Hacktivist Attacks on Critical Infrastructure Surge: Cyble Report
Russia-aligned hacktivist groups INTEID, Dark Engine, Sector 16, and Z-Pentest were responsible for the majority of recent ICS attacks, primarily targeting Energy & Utilities, Manufacturing, and Agriculture sectors across Europe.
Their campaigns focused on disrupting industrial and critical infrastructure in Ukraine, EU and NATO member states.
Cyber_Security_Channel
Russia-aligned hacktivist groups INTEID, Dark Engine, Sector 16, and Z-Pentest were responsible for the majority of recent ICS attacks, primarily targeting Energy & Utilities, Manufacturing, and Agriculture sectors across Europe.
Their campaigns focused on disrupting industrial and critical infrastructure in Ukraine, EU and NATO member states.
Cyber_Security_Channel
Cyble
Hacktivist Attacks on Critical Infrastructure Surge: Cyble Report
Hacktivist attacks on industrial control systems nearly doubled in Q3 2025, with Russia-aligned groups targeting critical sectors across Europe and beyond.
👍4❤2
Google Pays $100,000 in Rewards for Two Chrome Vulnerabilities
Google says it paid $130,000 in total for the bugs fixed with the release of Chrome 142.
While no bounties will be awarded for five issues, the company has yet to disclose the amounts to be handed out for two defects.
Cyber_Security_Channel
Google says it paid $130,000 in total for the bugs fixed with the release of Chrome 142.
While no bounties will be awarded for five issues, the company has yet to disclose the amounts to be handed out for two defects.
Cyber_Security_Channel
SecurityWeek
Google Pays $100,000 in Rewards for Two Chrome Vulnerabilities
The two bugs are high-severity type confusion and inappropriate implementation issues in the browser’s V8 JavaScript engine.
❤5👍3
State-Sponsored Hackers Stole SonicWall Cloud Backups in Recent Attack
The attacks, the cybersecurity firm said, did not appear linked to the cloud backup incident.
However, the sensitive information stored in the stolen files poses a high risk for the impacted organizations.
Cyber_Security_Channel
The attacks, the cybersecurity firm said, did not appear linked to the cloud backup incident.
However, the sensitive information stored in the stolen files poses a high risk for the impacted organizations.
Cyber_Security_Channel
SecurityWeek
State-Sponsored Hackers Stole SonicWall Cloud Backups in Recent Attack
The threat actor stole the firewall configuration files of all SonicWall customers who used the cloud backup service.
👍4❤3🔥1
Useful Material: Getting a Grip on Digital Identity
Identity really is sort of the tip of the spear of watching for breaches, because there will be failures probing an identity that will give you indicators that something bad is going to happen before it happens.
Once they have the authenticated identity, then it's really damaging.
But if you can see the leading indicators, you can get in front of it, and I think this is where AI is going to really help
Cyber_Security_Channel
Identity really is sort of the tip of the spear of watching for breaches, because there will be failures probing an identity that will give you indicators that something bad is going to happen before it happens.
Once they have the authenticated identity, then it's really damaging.
But if you can see the leading indicators, you can get in front of it, and I think this is where AI is going to really help
Cyber_Security_Channel
IT Pro
Getting a grip on digital identity
As AI agent adoption explodes, security leaders will need better identity controls than ever before
👍4❤3
🔴 Live Stream Announcement!
Join Mauro Eldritch to dissect FunkLocker; AI-powered #FunkSec ransomware behind 120+ attacks across North America and Asia.
Get actionable insights and learn to detect a full attack chain in minutes.
🕒 When: Nov 12, 3:00 PM, UTC
🔔 Set a reminder and tune in: https://www.youtube.com/live/PiWOtiYs25s?si=8CT55R0mxTFkQafx
-----
#ad #paidpromotion #sponsored
@Cyber_Security_Channel
Join Mauro Eldritch to dissect FunkLocker; AI-powered #FunkSec ransomware behind 120+ attacks across North America and Asia.
Get actionable insights and learn to detect a full attack chain in minutes.
🕒 When: Nov 12, 3:00 PM, UTC
🔔 Set a reminder and tune in: https://www.youtube.com/live/PiWOtiYs25s?si=8CT55R0mxTFkQafx
-----
#ad #paidpromotion #sponsored
@Cyber_Security_Channel
❤5👍4🔥4
Fresh, Just In: Many Forbes AI 50 Companies Leak Secrets on GitHub
Wiz’s scans also covered members and contributors of the core organization that could inadvertently expose company secrets in their own public repositories.
In addition, the scans targeted less common AI-related secrets that may be missed by traditional scanners.
Cyber_Security_Channel
Wiz’s scans also covered members and contributors of the core organization that could inadvertently expose company secrets in their own public repositories.
In addition, the scans targeted less common AI-related secrets that may be missed by traditional scanners.
Cyber_Security_Channel
SecurityWeek
Many Forbes AI 50 Companies Leak Secrets on GitHub
Wiz found the secrets and warned that they can expose training data, organizational structures, and private models.
👍8❤2
📣 Webinar: GenAI in Cybersecurity and Cybercrime
Join ImmuniWeb webinar to enhance your ImmuniWeb® AI Platform skills, earn CPE credits, and qualify to become ImmuniWeb® Certified Professional.
Key insights that will be covered:
• Emerging AI laws and regulations to consider
• Overall state of GenAI trends and developments
• GenAI in cybercrime: myths, realities and threats
• GenAI in cybersecurity: myths, risks and benefits
• Hacking AI-powered apps: OWASP Top 10 for LLMs
→ Date & Time: November 20 at 10am, 5pm and 9pm CET.
→ Host: Dr. Ilia Kolochenko, CEO & Chief Architect at ImmuniWeb, Attorney-at-Law.
Registration is open:
Session 1 – November 20, 2025
Geneva 10am | Dubai 1pm | Singapore 5pm
👉 Click here.
Session 2 – November 20, 2025
Geneva 5pm | New York 11am | California 8am
👉 Click here.
Session 3 – November 20, 2025
Geneva 9pm | New York 3pm | California 12pm
👉 Click here.
-----
#ad #paidpromotion #sponsored
@Cyber_Security_Channel
Join ImmuniWeb webinar to enhance your ImmuniWeb® AI Platform skills, earn CPE credits, and qualify to become ImmuniWeb® Certified Professional.
Key insights that will be covered:
• Emerging AI laws and regulations to consider
• Overall state of GenAI trends and developments
• GenAI in cybercrime: myths, realities and threats
• GenAI in cybersecurity: myths, risks and benefits
• Hacking AI-powered apps: OWASP Top 10 for LLMs
→ Date & Time: November 20 at 10am, 5pm and 9pm CET.
→ Host: Dr. Ilia Kolochenko, CEO & Chief Architect at ImmuniWeb, Attorney-at-Law.
Registration is open:
Session 1 – November 20, 2025
Geneva 10am | Dubai 1pm | Singapore 5pm
👉 Click here.
Session 2 – November 20, 2025
Geneva 5pm | New York 11am | California 8am
👉 Click here.
Session 3 – November 20, 2025
Geneva 9pm | New York 3pm | California 12pm
👉 Click here.
-----
#ad #paidpromotion #sponsored
@Cyber_Security_Channel
❤7🔥3
August Spotlight: Australia’s TPG Telecom Investigating iiNet Hack
The investigation is ongoing, but the company has determined that the hackers have exfiltrated email addresses, phone numbers and other types of data from the compromised system.
Cyber_Security_Channel
The investigation is ongoing, but the company has determined that the hackers have exfiltrated email addresses, phone numbers and other types of data from the compromised system.
Cyber_Security_Channel
SecurityWeek
Australia’s TPG Telecom Investigating iiNet Hack
TPG Telecom has disclosed a cybersecurity incident after discovering unauthorized access to an iiNet order management system.
❤3
Google Finds Malware Connecting to AI Large Language Models to Hone Attacks
One of the attacks, dubbed Quietvault, has been designed to steal login credentials from a Windows PC while leveraging "an AI prompt and on-host installed AI CLI [command line interface] tools to search for other potential secrets on the infected system.
Another malware strain, called Promptflux, appears to be experimental work by hackers. It stands out by tapping Google’s Gemini chatbot to modify its computer code to avoid detection.
“The most novel component of PROMPTFLUX is its ‘Thinking Robot’ module, designed to periodically query Gemini to obtain new code for evading antivirus software,
Cyber_Security_Channel
One of the attacks, dubbed Quietvault, has been designed to steal login credentials from a Windows PC while leveraging "an AI prompt and on-host installed AI CLI [command line interface] tools to search for other potential secrets on the infected system.
Another malware strain, called Promptflux, appears to be experimental work by hackers. It stands out by tapping Google’s Gemini chatbot to modify its computer code to avoid detection.
“The most novel component of PROMPTFLUX is its ‘Thinking Robot’ module, designed to periodically query Gemini to obtain new code for evading antivirus software,
Cyber_Security_Channel
PCMAG
Google Finds Malware Connecting to AI Large Language Models to Hone Attacks
The company is warning about newly discovered malware, including 'Promptflux' and 'Promptsteal,' that use generative AI. But one prominent researcher is questioning the findings.
👍5