Author: Admin

A new browser-based phishing technique has made it harder for users to spot malicious websites, according to recent cybersecurity research. The method, known as a Fullscreen Browser-in-the-Middle (BitM) attack and discovered by SquareX, exploits standard browser functionality to convincingly mask fake login pages as legitimate ones, without relying on bugs or vulnerabilities. This approach builds on traditional BitM tactics, where attackers use remote browser sessions to show real login interfaces in a pop-up window, tricking…

AI in the enterprise has become a strategic imperative for every organization, but for it to be truly effective, CIOs need to manage the data layer in a way that can support the evolutionary breakthroughs in large language models and frameworks. They need to move beyond traditional data architecture that is often rigid and siloed, which creates direct impediments to AI innovation and competitive agility. That’s why there is a massive pivot toward AI powered…

A newly uncovered remote access Trojan (RAT) that operated for weeks on a compromised system has been discovered and analyzed by security researchers. According to Fortinet’s FortiGuard Incident Response Team, the malware, which ran within a legitimate Windows process, used advanced evasion techniques to make recovery and inspection more difficult. In-Memory Only Malware with Corrupted Headers The malware was discovered running inside the dllhost.exe process under PID 8200. Its Portable Executable (PE) and DOS headers,…

Tenable® Holdings, Inc., the exposure management company, today announced its intent to acquire Apex Security, Inc., an innovator in securing the rapidly expanding AI attack surface. Tenable believes the acquisition, once completed, will strengthen Tenable’s ability to help organizations identify and reduce cyber risk in a world increasingly shaped by artificial intelligence.  Generative AI tools and autonomous systems are rapidly expanding the attack surface and introducing new risks — from shadow AI apps and AI-generated…

Hackers have gained unauthorized, persistent access to about 9000 ASUS routers in an ongoing exploitation campaign, according to cyber intelligence firm GreyNoise. Unlike typical malware attacks, the attackers maintain long-term access without dropping malware or leaving traces. Instead, the operation uses the routers’ own legitimate features to create persistent backdoors that survive firmware updates and reboots. It appears to be part of a stealth operation to assemble a distributed network of backdoor devices, potentially laying…