September 2025 – Page 26

Chinese TA415 Uses VS Code Remote Tunnels to Spy on U.S. Economic Policy Experts

A China-aligned threat actor known as TA415 has been attributed to spear-phishing campaigns targeting the U.S. government, think tanks, and academic organizations utilizing U.S.-China economic-themed lures.
“In this activity, the group masqueraded as the current Chair of the Select Committee on Strategic Competition between the United States and the Chinese Communist Party (CCP), as well as the

BreachForums Owner Sent to Prison in Resentencing

Conor Fitzpatrick, who pleaded guilty in July 2023, was sentenced last year to time served and supervised release.

The post BreachForums Owner Sent to Prison in Resentencing appeared first on SecurityWeek.

Scalekit Raises $5.5 Million to Secure AI Agent Authentication

The startup provides an authentication stack that secures both incoming authentication and outgoing agent actions.

The post Scalekit Raises $5.5 Million to Secure AI Agent Authentication appeared first on SecurityWeek.

From Quantum Hacks to AI Defenses – Expert Guide to Building Unbreakable Cyber Resilience

Quantum computing and AI working together will bring incredible opportunities. Together, the technologies will help us extend innovation further and faster than ever before. But, imagine the flip side, waking up to news that hackers have used a quantum computer to crack your company’s encryption overnight, exposing your most sensitive data, rendering much of it untrustworthy.
And with your

Decade-Old Pixie Dust Wi-Fi Hack Still Impacts Many Devices

NetRise has identified 20 device models from six vendors that are still vulnerable to Pixie Dust attacks.

The post Decade-Old Pixie Dust Wi-Fi Hack Still Impacts Many Devices appeared first on SecurityWeek.

Rethinking AI Data Security: A Buyer’s Guide

Generative AI has gone from a curiosity to a cornerstone of enterprise productivity in just a few short years. From copilots embedded in office suites to dedicated large language model (LLM) platforms, employees now rely on these tools to code, analyze, draft, and decide. But for CISOs and security architects, the very speed of adoption has created a paradox: the more powerful the tools, the

Shai-Hulud Supply Chain Attack: Worm Used to Steal Secrets, 180+ NPM Packages Hit

The packages were injected with malicious code to harvest secrets, dump them to a public repository, and make private repositories public.

The post Shai-Hulud Supply Chain Attack: Worm Used to Steal Secrets, 180+ NPM Packages Hit appeared first on SecurityWeek.

Scattered Spider Resurfaces With Financial Sector Attacks Despite Retirement Claims

Cybersecurity researchers have tied a fresh round of cyber attacks targeting financial services to the notorious cybercrime group known as Scattered Spider, casting doubt on their claims of going “dark.”
Threat intelligence firm ReliaQuest said it has observed indications that the threat actor has shifted their focus to the financial sector. This is supported by an increase in lookalike domains

RaccoonO365 Phishing Service Disrupted, Leader Identified

Microsoft and Cloudflare have teamed up to take down the infrastructure used by RaccoonO365.

The post RaccoonO365 Phishing Service Disrupted, Leader Identified appeared first on SecurityWeek.

DOJ Resentences BreachForums Founder to 3 Years for Cybercrime and Possession of CSAM

The U.S. Department of Justice (DoJ) on Tuesday resentenced the former administrator of BreachForums to three years in prison in connection with his role in running the cybercrime forum and possessing child sexual abuse material (CSAM).
Conor Brian Fitzpatrick (aka Pompompurin), 22, of Peekskill, New York, pleaded guilty to one count of access device conspiracy, one count of access device

Month: September 2025