Microsoft incident responders publish a playbook for detecting prompt abuse in enterprise AI tools
Indirect prompt injection via URL fragments can manipulate AI outputs while evading traditional server-side visibility.
Industry News
Notable developments across the security industry: law enforcement action, policy, events and vendor news.
66 reports
Hudson Rock ties Polyfill.io supply-chain compromise to DPRK operator via Lumma Stealer telemetry
Infostealer logs from 2024 allegedly expose Funnull backend access and a separate Gate.us compliance infiltration.
Security debt surges as legacy vulnerabilities accumulate
Veracode’s 2026 State of Software Security finds remediation capacity falling behind development velocity, with third-party components driving the longest-lived high-risk exposure.
Evil Corp and LockBit Connection Exposed: NCA Unmasks Cybercrime Kingpin
In a significant development, the UK's National Crime Agency (NCA) has named Aleksandr Ryzhenkov as a key figure in the notorious Russian cybercrime group Evil Corp, while also identifying him as…
Upcoming Conference - Hack.lu 2024
Hack.lu 2024 will take place from 22nd to 25th October in Luxembourg, showcasing the latest in cybersecurity innovation and research. Known for its wide range of topics, from malware analysis and…
RansomHub Ransomware Surge: A Growing Threat to Critical Infrastructure
In September 2024, U.S. authorities raised alarms over a significant threat that has been quietly gaining momentum this year— RansomHub , a ransomware-as-a-service (RaaS) platform that has been…
CrowdStrike Outage of July 2024: A Detailed Breakdown and Analysis
In **July 2024**, cybersecurity giant **CrowdStrike** faced a widespread **IT outage** that affected **over 8.5 million Windows systems** worldwide. This massive disruption was caused by a faulty…
Okta Credential Stuffing Attacks Surge in May 2024: Okta Advises Enhanced Security with ThreatInsight
In May 2024, Okta, a leading provider of identity and access management (IAM) solutions, reported a significant increase in credential stuffing attacks targeting its user base. These attacks,…
Cyber Threats to the 2024 Elections: The Role of Russia and Iran
Mandiant has highlighted Russia and Iran as prominent state-sponsored cyber threats poised to disrupt the 2024 elections. Their tactics, often multilayered and complex, include data theft, DDoS…
IBM's Acquisition of HashiCorp
IBM's recent announcement of acquiring HashiCorp for $6.4 billion underscores a significant shift in the cybersecurity landscape. This strategic acquisition aims to bolster IBM's capabilities in…
Autodesk Drive Phishing Campaign
A new phishing campaign leveraging Autodesk Drive has come to light, targeting corporate users through seemingly legitimate PDF files. Cybersecurity experts at Netcraft have uncovered that…
MITRE Corporation Security Breach: A Deep Dive into the Implications
The recent security breach at MITRE Corporation has raised significant concerns, given the organization's critical role in cybersecurity research and development. In January 2024, a…