In a concerning shift in cyberattack tactics, security researchers have uncovered a large-scale phishing campaign leveraging artificial intelligence to generate highly customized lures. The campaign, which intensified sharply in early March, is being described as one of the most aggressive and effective phishing operations seen in recent times.
The Google Chrome ecosystem is facing a new wave of browser-based threats — and this time attackers are exploiting the explosive popularity of artificial intelligence tools. Security researchers have uncovered dozens of malicious Chrome extensions masquerading as AI assistants that secretly harvest sensitive user data. More than 260,000 users have already downloaded these deceptive add-ons, highlighting a growing cybersecurity risk hiding in plain sight.
A China-linked cyber-espionage group known as Lotus Blossom has been attributed with medium confidence to the compromise of infrastructure used to host Notepad++, the widely used open-source text editor. The incident enabled attackers to deliver a previously undocumented backdoor dubbed Chrysalis to a select group of users, according to research from Rapid7.
The Original Promise Launched as part of the Airtel Thanks program, the offer originally allowed eligible Airtel users to claim a year of Perplexity Pro (valued at ~$200) without any financial commitment. Archived versions of the official help page dated as recently as late November 2024 explicitly confirmed that users did not need to provide credit card or debit card information to activate the service.
A China-linked advanced persistent threat (APT) group associated with HoneyMyte, also known as Mustang Panda or Bronze President, has been observed deploying a new kernel-mode rootkit to stealthily hide its ToneShell backdoor operations.
China-linked threat actors have been actively exploiting misconfigured Cisco security products to gain persistent access to targeted networks, according to new findings from Cisco. The campaign has been ongoing for several weeks and highlights how insecure configuration choices—not software flaws alone—can expose critical infrastructure to advanced cyber threats.
AI-Powered Phishing Surge Exploits Microsoft Authentication, Targets Thousands In a concerning shift in cyberattack tactics, security rese...
