Daily Cyber News coverage tagged Phishing & Social Engineering.
Employees are being flooded with email and then contacted through external Microsoft Teams chats by attackers posing as internal IT support. More than 400 incidents followed a recurring pattern, with targets contacted in short windows and malware sometimes running in under 15 minutes. The impostors…
Microsoft issued an out-of-band Windows update to remove trust from certificates connected to compromised eMudhra authorities. Eight intermediate certificate private keys were found to be recoverable within seconds because of an error during key generation. Microsoft removed seven associated certificates…
Organizations running PHP face active exploitation attempts against two newly disclosed security issues. Federal civilian agencies were ordered to patch by Thursday, while other organizations were told to identify every PHP system and update it. Thousands of failed attack attempts have been reported…
Development teams can add more structure before an AI coding agent begins changing code. Google has open-sourced the Elephant-Goldfish Model plugin, which requires an agent to write and defend a design document first. Fresh AI sessions then explain the plan, challenge assumptions, find ambiguities and…
Employees will receive another warning layer for scams that use conversation rather than malicious links or attachments. Microsoft is preparing AI-based phishing detection for Teams, focused mainly on first chats with external contacts. Targeted Release is expected in early November, with worldwide…
The systems that verify domain records may need significant changes before quantum computers can challenge conventional encryption. Internet governance bodies are accelerating preliminary work on quantum-safe protections for DNSSEC. Larger keys are one option, but they create larger zones, packets and…
One compromised device could become a route to root access on other servers in a Tailscale network, according to lab findings that Tailscale had not confirmed at publication. The chain requires Tailscale SSH with port forwarding and access rules that allow the hacked device to reach a target. No security…
More than 11.7 million Capcom accounts had email addresses and related account information exposed. The data included creation dates, last-login times, login counts, and last-login IP addresses. Attackers changed passwords for 196 accounts, while smaller subsets had additional profile details exposed…
Trust in eight eMudhra intermediate certificates collapsed after researchers reconstructed their weak private keys in under a second. Major browsers and software ecosystems blocked or updated trust for the affected certificates. eMudhra revoked them and announced its withdrawal from the global SSL and TLS…
Self-managed GitLab servers require urgent updates because an unauthenticated attacker could execute arbitrary code under certain conditions. The issue affects Community and Enterprise editions and sits in the regular-expression compiler. GitLab.com and specified Dedicated tenants were already protected…
Cisco Expressway devices could give attackers root-level command execution if exposed systems remain unpatched. An unauthenticated remote attacker with network access and possession of persistent cookies could connect to the database service and invoke specific commands. The issue affects Expressway Core…
Customer metadata and operational records may create downstream risk after attackers accessed PingCAP systems using stolen service-account credentials. PingCAP said the access lasted from September 9 to October 7 and included copied company data and source code. It found no evidence that customer…
Websites, software, and encrypted connections could be impersonated because eight eMudhra intermediate certificates used extremely weak private keys. Six certificates covered web encryption and two covered code signing. Browser and operating-system vendors have begun blocking the affected trust paths, and…
Internet-facing PHP servers face immediate compromise risk because attackers are broadly exploiting two critical code-execution weaknesses. Exploitation attempts appeared four days before public disclosure, followed by multiple proof-of-concept releases and more activity before the embargo ended on…
People who shared Meta Muse conversations through web links may have made sensitive content discoverable beyond the intended recipients. Researchers enumerated 6,800 share links and found apparently private information after reviewing several hundred. Conversation titles were placed in subdomains, where…