Stay safe this Christmas – be on the lookout for these scams.
From photos of former president Bill Clinton to images of strange scrapbooks, the Justice Department’s release is curious but far from revelatory.
Payroll-focused social engineering attacks target help desk staff, redirect employee salaries, and show how human factors can bypass traditional technical protections.
…
SantaStealer is a rebranded infostealer using modular data theft, modest pricing, and limited stealth, with no confirmed large-scale deployment yet.
…
Several hundred machines across a diverse set of organizations already compromised, Microsoft says.
Cisco warned that Chinese government hackers are exploiting a zero-day in some of its products. Researchers now say there are hundreds of vulnerable Cisco customers.
Two Chinese-nexus groups have been exploiting a newly discovered flaw to establish persistence and launch backdoors.
…
The attack seems to have happened in October but the risk towards citizens is minimal.
Businesses are rushing to deploy AI, creating overly permissioned, misconfigured systems.
Researchers spotted multiple groups using the same technique and believe it’s only going to get worse.