Consumer Reports detailed a security flaw in several Internet-connected doorbell cameras that allows hackers to hijack them. The organization published research on four security and privacy flaws in cameras made by EKEN, a company based in Shenzhen, China. According to Consumer Reports, the most significant issue is that if someone is near an EKEN doorbell camera, they can take control of it by downloading its official app, Aiwit, and pairing the camera by holding down the doorbell's button for eight seconds.

The National Institute of Standards and Technology's (NIST) Artificial Intelligence (AI) Bug Finder is a detection technology that identifies errors in code without executing the code itself and serves as a testbed. NIST's Information Technology Laboratory received a Department of Homeland Security (DHS) Commercialization Accelerator Program (CAP) grant in 2022 to support its AI Bug Finder project, and the research behind it continues. It has the advantage of being a modular program that enables the comparison of various AI-based techniques and datasets.

European discount retailer Pepco Group recently revealed that its Hungarian business has lost a significant amount of money to cybercriminals.  The UK-based company reported losing roughly $16.8 million in cash due to a "sophisticated fraudulent phishing attack." The company noted that an investigation has been launched and is working with banks and the police to recover the money.  Still, the company says it needs to determine whether the funds can be recovered.

The Federal Bureau of Investigation (FBI) and international law enforcement agencies disrupted some of the BlackCat ransomware group's operations two months ago, but elements of the group remain active, primarily targeting healthcare organizations. The FBI, the Department of Health and Human Services (HHS), and the Cybersecurity and Infrastructure Security Agency (CISA) released a new advisory on the group's activities, warning that BlackCat, also known as ALPHV, continues to operate despite law enforcement disruption and the release of a decryption tool for victims.

According to Enea, 76 percent of companies lack adequate voice and messaging fraud protection as Artificial Intelligence (AI)-powered voice phishing (vishing) and SMS phishing (smishing) increased after ChatGPT was launched. Sixty-one percent of businesses continue to suffer significant losses due to mobile fraud, with smishing and vishing being the most common and costly. Companies make up a sizable number of Communication Service Provider (CSP) subscribers.

Due to potential national security risks, the Biden administration will look into Chinese-made "smart cars" that can collect sensitive information about the Americans driving them. The investigation could result in new regulations preventing China from using sophisticated technology in electric vehicles and other connected vehicles to track drivers and their personal information. Officials are concerned about espionage activities being conducted through features such as driver assistance technology.

AI service Cutout.Pro has recently suffered a data breach exposing the personal information of 20 million members.  Cutout.Pro is an AI-powered photo and video editing platform for image enhancement, background removal, diffusion, colorizing, old photo restoration, and content generation.  On Tuesday, someone using the alias "KryptonZambie" shared a link on the BreachForums hacking forum to CSV files containing 5.93 GB of data stolen from Cutout.Pro.

In the SolarWinds attack, the threat actor behind it compromised the company's Orion network management product and used it to infiltrate target enterprise networks. The threat actor often used a technique called "Golden SAML" to maintain persistent access to applications and services in that environment. Semperis researchers have recently detailed a new version of the technique dubbed "Silver SAML." Silver SAML, like the original, uses SAML response forgery but does not require the attacker to have access to Active Directory Federation Services (ADFS).