According to security researchers at Imperva, in the last six months, retailers experienced over half a million (569,884) AI-driven attacks per day.  These attacks originate from AI tools like ChatGPT, Claude, and Gemini, alongside specialized bots designed to scrape websites for LLM training data.  The researchers observed a range of AI-driven threats, including bots, distributed denial of service (DDoS) attacks, API violations, and business logic abuse.

Transak, a fiat-to-crypto payment gateway provider, recently reported a security incident that has impacted 92,554 of its users. According to Transak, attackers gained unauthorized access to one of their employee laptops through a sophisticated phishing attack. The firm noted that the attacker used compromised credentials to log in to the system of a third-party KYC vendor that the company uses for document scanning and verification services. The attacker then gained access to user information stored within the vendor's dashboard.

The U.S. government has recently announced a reward of up to $10 million for information about the Russian media organization Rybar and its employees amid allegations it's involved in spreading propaganda aimed at influencing the upcoming U.S. presidential election.  According to the State Department, Rybar has been accused of using its extensive social media reach, with over 1.3 million followers on various channels, to promote pro-Russian and anti-Western sentiments.

According to security researchers at Netskope, the Bumblebee malware loader could have re-emerged months after Europol-led Operation Endgame disrupted it in May 2024.  Researchers have uncovered a new infection chain that deploys Bumblebee malware.  The researchers noted that this was the first occurrence of a Bumblebee campaign since Operation Endgame, a law enforcement operation performed by Europol and partners in May 2024 that disrupted major malware botnets.

Cyprus recently announced  that it has successfully thwarted a digital attack to block access to the government's central online portal.   The government noted that the distributed denial-of-service attack, or DDoS, only affected the main government portal gov.cy "for a few minutes" and that no other online government ministry or service website was affected.  The deputy ministry didn't say who was behind the attacks or the possible motive.

Security researchers at Positive Technologies recently observed a threat actor attempting to exploit a recent vulnerability in Roundcube Webmail against a governmental organization in a Commonwealth of Independent States (CIS) country.  Tracked as CVE-2024-37383 and described as a cross-site scripting (XSS) issue affecting the way Roundcube was handling SVG animate attributes, the bug was patched on May 19 in Roundcube Webmail versions 1.5.7 and 1.6.7.

Cisco recently confirmed that some of its files have been stolen after a hacker offered to sell information allegedly belonging to the company.  The hacker known as IntelBroker on October 14 announced a “Cisco breach” on a popular cybercrime forum.  IntelBroker claimed to have obtained GitHub and SonarQube projects, source code, hardcoded credentials, certificates, confidential documents, Jira tickets, API tokens, AWS private buckets, encryption keys, and other types of information.

Since its discovery in June 2024, the "Cicada3301" ransomware group has targeted critical sectors in the US and UK. In three months, the group has exposed data stolen from 30 companies on their leak sites. Group-IB recently revealed that Cicada3301's ransomware is written in Rust, thus enabling it to run on Windows, Linux, ESXi, and less common architectures such as PowerPC. The Cicada3301 ransomware uses advanced encryption techniques involving ChaCha20 and RSA encryption with configurable modes, welcoming different levels of encryption.

Security experts urge caution regarding Chinese researchers' recently reported work in cracking military-grade encryption using quantum computing technology. In a study titled "Quantum Annealing Public Key Cryptographic Attack Algorithm Based on D-Wave Advantage," Shanghai University researchers claimed to have used a D-Wave Advantage quantum computer to target Substitution-Permutation Network (SPN) algorithms that are foundational to Advanced Encryption Standard (AES) cryptography.

Microsoft warned that a recently patched macOS vulnerability could be used in adware attacks. The flaw enables attackers to bypass the operating system's Transparency, Consent, and Control (TCC) technology and access user data. Apple addressed the bug in macOS Sequoia 15 by removing the vulnerable code. The company also emphasized that only MDM-managed devices are affected. According to Microsoft, the flaw's exploitation involves removing the TCC protection for the Safari browser directory and modifying a configuration file in the directory.