Cyber CrimeAgentForger: The New Corporate Mole
A now-patched flaw in OpenAI's platform allowed attackers to deploy autonomous, malicious agents via a single malicious link.
Cyber Crime
Data breaches, ransomware payouts, and phishing operations rarely make the news until the damage is already done. This is where Xploitwire tracks the attackers — who they are, how they got in, and what it means for the organizations and people caught in the blast radius.
Cyber Crime
Cyber CrimeSocial Engineering in Hospital Records
A red teamer exploited human behavior to gain unauthorized access to a hospital records room, highlighting significant security gaps.
Cyber CrimeEstée Lauder Breach Tied to Oracle Flaw
A critical vulnerability in Oracle E-Business Suite led to the exposure of personal data at the global cosmetics firm.
Cyber CrimeLLM-Assisted Phishing Kits Scale Attacks
Researchers uncovered an exposed server revealing how attackers use AI to industrialize the creation of malware delivery campaigns.
Cyber CrimeCruciferra Crypter Evolves Malware Tactics
A sophisticated crypter service is leveraging process ghosting and kernel-driver abuse to cloak various commodity malware strains.
Cyber CrimeCraneware Data Breach Impacts US Health
A cyberattack on the billing software provider has resulted in the theft of employee, customer, and partner records.
Cyber CrimeHugging Face Network Breach Highlights AI
An autonomous AI agent framework successfully breached internal Hugging Face infrastructure, marking a shift in attacker tactics.
Cyber CrimeRussian Intel Targets NATO Logistics
Intelligence agencies report that Russian actors are hijacking IP cameras to monitor military movements across Europe and Ukraine.
Cyber CrimeEY Breach Exposes Sensitive Tax Data
A third-party platform compromise has led to the unauthorized access of client tax documents at Ernst & Young.
Cyber CrimeRansomware Gangs Vie for Cyber Supremacy
A rivalry between major threat actors is escalating, with data showing a surge in attacks targeting small businesses and large enterprises.
Cyber CrimeHollowGraph Malware Hijacks 365 Calendars
A newly identified malware sample, HollowGraph, is utilizing Microsoft 365 calendar events as a covert command and control channel.
Cyber CrimeEY Support Platform Breach Exposed Data
A third-party IT management tool used by Ernst & Young was compromised, leading to the unauthorized exfiltration of tax documents.
Cyber CrimeAI-Driven Botnets Evolve at Speed
A threat actor used Google Gemini CLI to automate botnet management and infrastructure migration, bypassing traditional defenses.
Cyber CrimeUK Police Seek New Powers After TfL Hack
Law enforcement officials are advocating for Cybercrime Risk Orders following the sentencing of two Scattered Spider hackers.
Cyber CrimeAI Connectors Escalate Security Exposure
Third-party AI integrations evolve too quickly for traditional security models, exposing enterprise data to unforeseen downstream risks.
Cyber CrimeFidelity Breach Payouts Near Deadline
Time is running out for victims of the 2024 Fidelity data breach to claim their share of a $2.5 million settlement fund.
Cyber CrimeACR Stealer Escalates Enterprise Threats
A sophisticated malware-as-a-service campaign is leveraging social engineering and WebDAV to compromise enterprise environments.
Cyber CrimeSan Francisco Targets Nudify App Stores
The city of San Francisco has issued a demand for Apple and Google to remove AI-powered apps capable of generating non-consensual deepfake imagery.
Cyber CrimeAbbott Labs Investigates Dual Intrusion
Abbott is currently evaluating the security impact of two distinct unauthorized access claims within its diagnostic and lab portal divisions.
Cyber CrimeDigiCert Breach Highlights Trust Gap
A Chinese sub-group's infiltration of DigiCert reveals how stolen code-signing certificates are weaponized against the industry.