Search: “Windows Update Stack”

7 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 232 Exploit / PoC 87 Malware 67 Ransomware 63 Policy & legal 23 Industry 19 Data breach 14 Threat actor 13 Phishing & fraud 7 AI safety & security 7 Advisory 7 Tools 5 Model release 4 AI tools & infra 4

SeverityAll critical 297 high 124 medium 85 low 24 info 26

Risky Bulletin: Ukraine's top prosecutor resigns amid scam call center scandal

Ukraine's top prosecutor Ruslan Kravchenko resigned after NABU arrested a deputy for taking bribes protecting scam call centers running fake investment platforms.

Ukraine's anti-corruption bureau NABU arrested Serhiy Kropyva, Deputy Head of International Cooperation at the Prosecutor General's Office, alleging officials took monthly protection fees from a network of 100-500 scam call centers luring victims into fake investment platforms, with bribes reportedly growing from $700,000 to $3.5 million per month. Prosecutor General Ruslan Kravchenko resigned on Monday, calling it a political decision, while Kropyva was fired with bail set at 120 million hryvnias ($2.7 million) and over 100 call centers shut down in the past month. The newsletter also briefly covers a cyberattack crippling more than 80 Luxembourg medical practices via payment vendor BMS Engineering, ShinyHunters' claimed theft of 200,000 Florida DMV driver records, a cyberattack on the American Meteor Society, and school closures in Springfield, Massachusetts.

Risky Business NewsSep 9, 06:06 UTC · 7d agoPhishing & fraud

Attackers are impersonating a road toll payment processor across the U.S. in phishing attacks

Cisco TalosMay 30, 18:01 UTC · May 30, 2024Phishing & fraud CVE-2024-21785 CVE-2024-23601 CVE-2024-24963+1 CVEs

Detect and disrupt AI-themed attacks with Microsoft Defender

Microsoft Threat Intelligence reports criminal campaigns impersonating ChatGPT, Copilot, Claude, and DeepSeek in phishing, AiTM, and malvertising attacks reaching 100,000 emails daily.

Microsoft Threat Intelligence observed a growing set of campaigns that abuse trust in popular AI brands: a ChatGPT-themed phishing campaign sent up to 100,000 emails in one day to steal payment card data, and a Claude-themed campaign used adversary-in-the-middle techniques to harvest credentials and access tokens. Other campaigns included malvertising for a fake AI Windows plugin delivering the Vidar stealer and fraudulent DeepSeek installers distributed via GitHub. Initial access broker Storm-3075 used AI-themed malvertising to distribute payloads for multiple downstream actors, and Microsoft notes the AI services themselves were not compromised. Microsoft also details Defender protections such as Safe Links, Safe Attachments, and attack disruption against these multi-stage lures.

Microsoft Security BlogSep 10, 16:00 UTC · 5d agoPhishing & fraud in the wild1

Search: “Windows Update Stack”

Risky Bulletin: Ukraine's top prosecutor resigns amid scam call center scandal

Attackers are impersonating a road toll payment processor across the U.S. in phishing attacks

Detect and disrupt AI-themed attacks with Microsoft Defender

The Resilience Dilemma

A single platform powers SIM farm proxy networks across 17 countries

New Advanced Phishing Kits Use AI and MFA Bypass Tactics to Steal Credentials at Scale

Padlocks, Phishing and Privacy; The Value Proposition of a VPN