Cybersecurity researchers have disclosed details of a ClickFix delivery platform called ROMULUS that's being used to distribute malware such as Legion Loader. According to Forescout Research - Vedere Labs, ROMULUS is akin to a malware delivery service that employs ClickFix-style lures on bogus landing pages to trick unsuspecting users into running malicious commands and infecting their own

#infosec #threatintel #malware #romulus #clickfix #platform #deliver

Single sign-on to help address imminent threats to life, critical infrastructure, or kids

#tech #enterprise #offbeat #access #enforcement #icann #info #law

Shared from SANS ISC Bot.

#infosec #sans #threatintel #isc #20th #edu #october

Kinda crazy how many people submit their sensitive information to frontier models. Tax documents, health data, financial transactions etc. Built this as a proof of concept. Venice AI is on a similar wavelength where they limit identity connected to prompts, but not information in the prompts. Sometimes it's tough to actually filter all sensitive information and keep the same quality in responses. I can share the github if anyone is interested. Note: Was also experimenting with OpenMed Privacy Filter on my mac, but it is not compatible with a linux server. Comments URL: https://news.ycombinato…

#hackernews #showhn #projects #frontier #models #information #privacy #sensitive

A large-scale scam operation impersonating Microsoft uses a malicious traffic distribution system (TDS) run by a Russian organization and abuses thousands of Cloudflare links.

#infosec #enterprise #operation #scam #microsoft #support #infiltrate

Spyware vendors are exploiting targeted ad bidding in the digital ecosystem to identify and track individuals and organizations of interest.

#infosec #enterprise #spyware #adfection #delivery #turns #impressions

Researchers say attackers authenticated into Microsoft 365 tenants using ConnectWise credentials; ConnectWise says customer impact remains unconfirmed.

#infosec #enterprise #connectwise #amid #backups #cloud #disables

Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day after a proof-of-concept (PoC) went public. According to a researcher who goes by the online alias boredhackerblog, the exploitation activity involves chaining four different vulnerabilities, collectively called Plex2Shell. The vulnerabilities

#infosec #threatintel #exploit #miners #plex2shell #proxy #backdoor

Copies of Rank Math PRO, the paid version of the Rank Math SEO plugin for WordPress, that were downloaded from rankmath.com or delivered as updates between 20:02 UTC on October 15 and 07:12 UTC on October 16 contained malware, Rank Math said in a security notice published on October 16. Any site that installed and activated one of those copies should be treated as compromised, and the

#infosec #threatintel #math #rank #plugin #pro #seo

Copyright takedown requests tied to OnlyFans and other adult content creators are revealing how attackers exploit vulnerable university and government websites to manipulate search results. UpGuard's Greg Pollock explains what universities, government websites, and security teams need to think about next.

#infosec #enterprise #websites #copyright #onlyfans #compromised #expose

The worst problems don't always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone bought, or a system nobody thought to check. By the time something looks wrong, the damage may already be done. This week had plenty of that. Trusted connections became a problem. Hardware wasn't as safe as it looked. Old bugs found new victims, and some systems were

#infosec #threatintel #zeroday #100m #agents #crypto #hit

An industry-wide laser focus on vulnerabilities has left cybersecurity teams without enough room to strategize for resilience.

#infosec #enterprise #cybersecurity #resilience #evolving #lexicon #discovery

U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources close to the investigation say one of the executives in the United States even helped ShinyHunters operate a website that pressured victims into paying a ransom.

#security #infosec #krebs #shinyhunters #extortion #ransom #usa #feds

The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish open-source developers and deliver a stealer malware disguised within a fake font file. The latest evolution, detailed by OpenSourceMalware, signals that the attackers are actively refining their modus operandi in response to steps

#infosec #threatintel #attackers #disguised #font #ghostaction #github

In Salesforce Agentforce, the recommended way to make an agent respond to events is a Flow: a record is created or a case is updated, and the Flow passes data into the agent's prompt. Separately, Email-to-Case and Web-to-Case turn inbound customer messages into case records; it is how airlines and hotels run support intake. Both are standard, documented, as-designed features. Chained together,

#infosec #threatintel #emailtocase #agents #boardroom #break #built