Security and Cloud, page 3
ChatGPT Atlas Faces Prompt Injection Challenges — OpenAI Strengthens Defenses
OpenAI’s ChatGPT Atlas, the AI-powered browser launched last October, is facing security challenges from clever “prompt injection” tricks. Researchers recently showed that even simple inputs through Google Docs could manipulate the AI’s behavior, highlighting vulnerabilities inherent in agentic AI systems. In a Monday blog post, OpenAI addressed these attacks while outlining ongoing efforts to make […]
U.S. Justice Department Seizes Fraudulent Domain Behind $14.6M Bank Account Takeover Scheme
The U.S. Justice Department has struck a major blow against online banking fraud. Authorities announced on Monday that they seized a web domain and database linked to a criminal operation that targeted Americans through sophisticated bank account takeover schemes. The domain, web3adspanels[.]org, acted as a backend hub where cybercriminals hosted stolen bank login credentials and […]
US Offers $10M Reward for Iranian Hackers: What the Shahid Shushtari Unit Means for Cybersecurity
The U.S. has publicly named individuals tied to an Iran-linked cyber unit and is offering up to $10 million for information. Here’s the context and what organizations should do now. Why this matters The U.S. State Department’s Rewards for Justice program is offering up to $10 million for information on two people connected to a […]
Infostealer Hits ChatGPT Shares: How ClickFix Scams Are Using Shared Chats to Deliver macOS Malware
A new campaign is abusing ChatGPT’s chat-sharing feature and paid search ads to host malicious installation guides on the official chatgpt.com domain. Victims who follow the fake “Atlas browser” instructions and paste a shell command into macOS Terminal end up installing a powerful infostealer (AMOS) and a persistent backdoor. Here’s how the attack works, why […]
Switzerland Warns Against Microsoft 365, Google Cloud, and AWS Over Data Privacy Concerns
The Swiss government is raising the alarm about using major cloud services from Microsoft, Amazon, and Google, citing concerns over encryption and data sovereignty. According to the Conference of Swiss Data Protection Officers (Privatim), public bodies could be exposing sensitive information to foreign authorities without proper safeguards. Why Swiss Authorities Are Concerned At the heart […]
How Cybercriminals Upgraded Their Toolkit in 2025 — And What Financial Security Might Look Like in 2026
The financial sector spent most of 2025 navigating a cybersecurity storm unlike anything seen in previous years. Kaspersky’s newly released 2025 Security Bulletin paints a picture of attackers who aren’t just refining old tricks—they’re reinventing the playbook with AI-driven malware, blockchain-powered command structures, supply chain infiltrations, and social-engineering tactics that blur the line between the […]
CISA Alert: Spyware Campaigns Are Hijacking Signal & WhatsApp — How to Protect High-Value Mobile Users
Official guidance and practical steps after CISA warns that commercial spyware and RATs are actively going after messaging-app accounts, especially those of high-value individuals. Why mobile messaging users are under attack Apps like Signal and WhatsApp are increasingly targeted by commercial spyware operators and remote access trojans (RATs). According to CISA, attackers are exploiting social […]
Major U.S. Banks Hit by SitusAMC Vendor Breach What Financial Firms Need to Know
A November security incident at SitusAMC — a technology provider handling loan documents and corporate records for hundreds of financial institutions — has potentially exposed client accounting records, legal agreements, and customer data. With JPMorgan Chase, Citi, and Morgan Stanley reportedly affected, the attack is a wake-up call about third-party risk in banking. What happened […]
ToddyCat’s New Toolkit Steals Outlook Emails and Microsoft 365 Tokens — What Security Teams Need to Know
ToddyCat, an APT active since 2020, has upgraded its playbook. New tools—TCSectorCopy and advanced variants of TomBerBil—are letting operators copy Outlook OST files and harvest Microsoft 365 access tokens. Here’s a clear breakdown of how the attacks work, why they matter, and what defenders should do right now. Why ToddyCat’s new tricks are raising alarms […]
How Web Application Penetration Testing Protects Modern Apps in an AI-Driven Threat Landscape
Modern businesses run on web applications—whether it’s e-commerce, SaaS dashboards, internal portals, or customer-facing digital experiences. But as apps grow smarter, more connected, and more essential, they also grow significantly more vulnerable. Every API endpoint, third-party widget, and login form becomes another window attackers can test, exploit, or quietly slip through. That’s why web application […]
The World’s 10 Most-Used Passwords in 2025 — And Why Cybersecurity Still Has a Human Problem
If you think cybercriminals rely on ultra-sophisticated hacks, the latest global password report for 2025 tells another story entirely. Despite years of awareness campaigns, data breaches, and digital transformation, billions of people are still using painfully predictable passwords — and hackers are taking full advantage.A new report from password manager NordPass reveals a troubling trend: […]
Spyware in the US? How Apple, WhatsApp and New Vendors are Shaping the Fight Against Mercenary Hacking Tools
As companies behind powerful phone-hacking tools try to enter the U.S. market, Apple and WhatsApp have doubled down on user protection — vowing to keep alerting people when their devices are targeted. Here’s what that means for privacy, policy, and everyday defense. Spyware’s U.S. comeback raises new concerns Apple and WhatsApp have reaffirmed their commitment […]