Alabama government agencies slammed with DDoS attacks, House swiftly passes TikTok bill, EU passes comprehensive AI legislation, Microsoft releases Copilot AI security tool, Scientists pry open closed AI services, Critical flaws in ChatGPT found, Wyden presses NCSC on Chinese smart locks, Wiz eyes $800 million funding round, much more
Jury finds cryptomixing service founder guilty, White House urges UnitedHealth to make more funding available for healthcare providers affected by ransomware attack, Patch Tuesday updates released, LockBit operator sentenced to four years in Canada, GAO raps CISA for OT shortcomings, much more
Automakers collect information on connected car drivers for insurance companies, French government hit by powerful DDoS attacks, Incognito Market is extorting vendors and buyers, Roku data breach affects over 15,000 customers, Magnet Goblin exploits 1-day flaws, JetBrains blames Rapid7 for its vulnerability exploits, EU violated its own data protection
CISA systems breached by hackers, Change Healthcare ransomware attack is still a crisis, IntelBroker claims hack of ICE and USCIS contractor, Radaris co-founders have deep ties with Russia, South African regulator hit by cyberattack, Crypto phishing incidents total $104m during January and February, WOOFi exploited for $8.75m, much more
Terrifying AI voice-cloned scams, Microsoft Bing props up China's firewall, Hacking Google's AI, Low-level Ukrainian cybercrime actors are bored, Living forever through AI
GhostSec and Stormous launch double-extortion attacks using new RaaS program, Stormous claims attack on Belgian brewery, Hacking ring targets doctors and other prescription writers to sell drugs, China's private hacking industry is a cesspool, Devices can hack Teslas in MiTM attacks, Wordpress sites subject to widescale bruteforce attacks,
41 state attorneys general warn Meta about stolen Facebook and Instagram accounts, VMWare releases fixes for critical flaws, Top AI image generators can create phony election images, Top Microsoft engineer warns of harmful AI image tools, Spain stops Worldcoin eyeball scanning, FBI says online fraud is escalating, Meta and Apple
ALPHV pulled an exit scam, HHS offers help to ALPHV attack victims, Apple issues emergency fixes for zero days, Canada's Fintrac hit with cyberattack, Legislators introduce new TikTok ban, 225K OpenAi credentials for sale on dark web, NSA issues new zero-trust guidance, Oregon enacts right-to-repair bill, much more
Ukraine claims breach of Russian Defense Ministry, JetBrains urges TeamCity patches, Kimsuky is exploiting ScreenConnect flaws with new malware, Former Air Force employee accused of disclosing sensitive information on dating site, Teixeira faces up to 16 years in prison, AmEx warns of credit card exposure, more
DOJ indicts IRGC-linked hacker for massive cyberespionage campaign, N. Korea conducted cyber attacks on S. Korea's semiconductor companies, Russian intel eavesdropped on German military brass via WebEx, CryptoChameleon phishing targets FCC employees, German cops seize Crimemarket, much more
Secret network of CIA-funded spy bases in Ukraine, The Pentagon uses ad networks to find targets, A Morris worm for the AI-era, The last Morse-code station in North America, How the Internet was indexed, AI warfare threatens humanity, AI warfare is already here
Two ransomware actors injected confusion into this week's cybersecurity news with scams, headfakes and likely outright fabrications. Update: Since we wrote this post, the second group that played head games with us last week (see below), Mogilevich, outright admitted it was a scammer, saying, “None of the databases