Malicious Chimera Turns Larcenous on Python Package Index
Unlike typical data-stealing malware, this attack tool targets data specific to corporate and cloud infrastructures in order to execute supply chain attacks.
Anubis Ransomware-as-a-Service Kit Adds Data Wiper
The threat of wiping files and servers clean gives Anubis affiliates yet another way to leverage ransomware victims who may be hesitant to pay to get their data back, Trend Micro said.
Washington Post Staffer Emails Targeted in Cyber Breach
Journalists' Microsoft accounts were breached, which would have given attackers access to emails of staff reporters covering national security, economic policy, and China.
'Water Curse' Targets Infosec Pros Via Poisoned GitHub Repositories
The emerging threat group attacks the supply chain via weaponized repositories posing as legitimate pen-testing suites and other tools that are poisoned with malware.
AI-generated synthetic identity fraud is accelerating at an unprecedented pace, reshaping the global threat landscape and exposing gaps in traditional identity verification systems, TechRadar reports.
A former employee of Evoke Wellness in Hilliard, Ohio, is facing criminal charges for allegedly stealing and selling the personal data of at least 240 addiction treatment patients, reports Cybernews.