Aggregator

AI-Driven Pushpaganda Scam Exploits Google Discover to Spread Scareware and Ad Fraud

The Hackers News
1 week 2 days ago
Cybersecurity researchers have unmasked a novel ad fraud scheme that has been found to leverage search engine poisoning (SEO) techniques and artificial intelligence (AI)-generated content to push deceptive news stories into Google's Discover feed and trick users into enabling persistent browser notifications that lead to scareware and financial scams. The campaign, which has been
The Hacker News

据报CIA在伊朗营救行动使用以色列间谍软件

黑鸟
1 week 2 days ago
英国《泰晤士报》报道，上周末美方在营救两名被击落美军飞行员中的第二名时，美国中央情报局（CIA）使用了以色列制造的 "飞马"（Pegasus）间谍软件在伊朗境内开展大规模欺骗行动。 这款被中情局广泛部署的间谍软件，最广为人知的用途是入侵智能手机等电子设备（安卓系统和IOS系统都有），窃听通话与即时通信内容，并秘密窃取设备内的所有数据。 但它还具备一项特殊功能： 操作人员可以冒用被入侵手机机主的身份，发送伪造的 WhatsApp 或 Signal 加密消息。 根据《泰晤士报》周五发布的独家报道，美国情报机构正是利用飞马软件的这一功能，向伊朗高层领导人及伊斯兰革命卫队（IRGC）作战人员批量发送虚假消息，谎称那名失踪的美军飞行员已经被找到，以此误导伊朗方面的搜捕方向，为营救行动争取时间。 美国官员此前已公开承认在此次行动中使用了情报欺骗手段，黑鸟查了一下，截至目前，没有任何官方人士明确提及使用了飞马软件，除了泰晤士报的独家报道，剩下的基本都是引用其来源。 由以色列创立的 NSO 集团开发的飞马软件，长期以来饱受国际社会争议。此前有大量报道证实，沙特阿拉伯、印度等多个国家和地区，曾利用这款软件针对特定目标进行监控。 截图来自 https://www.thetimes.com/world/middle-east/israel-iran/article/iran-war-how-cia-used-ghost-murmur-tool-detect-airman-heartbeat-jcbvk02ts

W3LL phishing service sold for $500 dismantled by the FBI

Help Net Security
1 week 2 days ago

The W3LL phishing kit, a cybercrime tool used to impersonate legitimate login pages and steal usernames and passwords, has been dismantled by the FBI and Indonesian law enforcement authorities. Officials estimate the operation was tied to more than $20 million in attempted fraud. (Source: FBI) “For a fee of about $500, users could purchase access to the phishing kit and deploy fake websites designed to look nearly identical to trusted login portals,” the FBI said. … More →

The post W3LL phishing service sold for $500 dismantled by the FBI appeared first on Help Net Security.

Sinisa Markovic

5 Ways Zero Trust Maximizes Identity Security

Bleeping Computer.
1 week 2 days ago
Stolen credentials remain a top breach vector, often leading to unchecked privilege escalation. Specops explains how identity-first Zero Trust limits access, enforces device trust, and blocks lateral movement. [...]
Sponsored by Specops Software

US, UK and Canada disrupt $45M crypto theft in Operation Atlantic

Security Affairs
1 week 2 days ago
US, UK and Canada ran Operation Atlantic, uncovering $45M in crypto theft and freezing $12M to return to victims. An international law enforcement operation from the US, UK and Canada, codenamed Operation Atlantic, has targeted large-scale cryptocurrency theft schemes. Authorities identified more than $45 million in stolen digital assets and successfully froze around $12 million. […]
Pierluigi Paganini

If You Can’t See the Slice, You Can’t Sell the SLA

Netscout
1 week 2 days ago
Network slicing on 5G standalone (5G SA) networks holds tremendous promise for communications service providers (CSPs). It’s also one of the clearest paths to 5G monetization. The very idea of delivering many purpose-built “virtual networks,” each tuned for a different customer, application, or performance tier, is...
Heather Broughton

Claroty advances CPS security with Visibility Orchestration in xDome

Help Net Security
1 week 2 days ago

Claroty has revealed new Visibility Orchestration capabilities in its Saas offering Claroty xDome, transforming visibility from a vague concept into a quantifiable measurement that proves the value of a strong CPS protection program. Visibility Orchestration elevates organizations across the industrial, healthcare, commercial, and public sectors to a high-fidelity understanding of their CPS environments, enabling measurable, actionable improvements in data quality and security posture and safely orchestrated risk reduction. The rising threat of visibility blind spots … More →

The post Claroty advances CPS security with Visibility Orchestration in xDome appeared first on Help Net Security.

Industry News

Managed ad