China-aligned attackers used AI agents and compromised ConnectWise application credentials to target more than 2,250 Microsoft 365 tenants, Microsoft says. The Windows giant revealed this week that the attackers, tracked as Storm-0940, used an open source AI penetration-testing tool called ARTEX to automate attacks against Microsoft 365 environments. In some cases, they went from picking a target to gaining privileged cloud access in less than three hours. READ MORE...
Medical laboratory operator Quest Diagnostics said it learned of a cyber breach of one of its systems this week, likely compromising some records for patients. In a Thursday regulatory filing, Quest Diagnostics reported "unauthorized access" to its Quanum Lab Services Manager, a platform where certain clients can place test orders and receive or look up their results. The company said it discovered the hack on Wednesday and notified federal law enforcement. READ MORE...
Players who signed up for Capcom's online account service may want to look twice at emails that seem to come from the company. The company has disclosed that a third party gained unauthorized access to customer information linked to CAPCOM ID, the account people use to sign in to the company's web services and to play some of its games online. It detected suspicious activity on October 19 and confirmed the intrusion the same day. Capcom is the Japanese video game developer and publisher. READ MORE...
An attack tool built around AI goes looking for AI models that anyone on the internet can reach, then uses them to plan break-ins while the model's owner pays for the computing power. Symantec captured the agent's instruction set this summer through a honeypot posing as an unprotected AI service, researchers Priti More and Susmit Yenkar wrote. Its operators sent their entire working prompt to the decoy, expecting a live model on the other end to carry out the instructions. READ MORE...
A Russia-linked hacker group broke into the network of a shipbuilder in a NATO member state during a two-month campaign that also targeted government agencies and other critical manufacturers, Symantec researchers said on Tuesday. The operation, conducted by operatives from APT28, also known as Fancy Bear, involved both familiar malware and a mysterious new piece of code. Symantec said the hacking campaign had a clear espionage goal and warned potentially vulnerable businesses to protect themselves. READ MORE...
Security researchers have linked a China-nexus threat group to the supply-chain attack that abused ConnectWise Cloud Backup against Microsoft 365 tenants. The state-aligned group, tracked as Storm-0940, used an agentic AI pen-testing tool called Artex to automate attacks against hundreds of organizations across the globe, according to a report released Wednesday from Microsoft. "Nation-state actors are increasingly targeting the software supply chain... READ MORE...
Law enforcement agencies have disrupted nearly 11,000 cybercriminal networks and arrested more than 1,400 people in Operation Serengeti III, which targeted business email compromise, ransomware, and online scams. Coordinated by Interpol, the operation involved authorities from 21 countries and private partners like Team Cymru, Kaspersky, Group-IB, and Fortinet, in a major crackdown on cybercrime across Africa. READ MORE...
A recently disclosed flaw in Signal's calling software could allow another participant to keep hearing you after you hang up. The vulnerability, tracked as CVE-2026-113380 (CVSS score 9.3 out of 10), affects RingRTC versions earlier than 2.72.0. RingRTC is the open-source library behind Signal's voice and video calling functionality, providing calling components for its mobile and desktop applications. The main concern is unwanted listening after someone believes a conversation has ended. READ MORE...