Bernardo Quintero, previously leading Google’s cybersecurity team, has returned to a hands-on role in a basement lab in Malaga with a youthful team focused on developing “Omnia”, an AI-driven platform for cybersecurity aimed at both experts and the general public. The project automates tasks traditionally performed by cybersecurity analysts and is already being tested by over 800 professionals. Quintero emphasizes the collaborative spirit and innovation within the team, reminiscent of the early days of VirusTotal. …

In a concerning incident, BBC Cyber correspondent Joe Tidy was approached by a criminal gang, Medusa, who offered him a significant share of ransom payments for facilitating a hack on the BBC’s IT systems. They promised large financial gains in exchange for insider access, emphasizing the ease with which they have previously corrupted employees at other organizations. The hackers employed aggressive tactics, pushing Tidy for immediate responses and claiming they had successfully exploited numerous victims. …

Acreed, a newly emerged infostealer since early 2025, is gaining traction among Russian-speaking cybercriminals for its stealthy approach and minimalistic logging that obscures infection pathways. It typically infects systems via trojanized installers and utilizes advanced mechanisms such as dedicated C2 channels linked to platforms like Steam and BNB Smartchain for secure data exfiltration, targeting browser credentials and cryptocurrency wallets. The malware’s design underscores a significant evolution in cyber threats, employing sophisticated tactics like JavaScript clipper …

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued Emergency Directive 25-03 due to significant vulnerabilities in Cisco Adaptive Security Appliances (ASA) and Firepower platforms, which are being exploited by advanced threat actors. CISA mandates federal agencies to swiftly identify and mitigate these vulnerabilities, emphasizing the urgent need for inventory and updates on affected devices. The directive highlights the risk of remote code execution and privilege escalation, compelling agencies to disconnect unsupported systems and …

The Akira ransomware group is actively exploiting a significant vulnerability in SonicWall firewalls, identified as CVE-2024-40766, which has a CVSS score of 9.3. Despite being patched in August 2024, attacks have surged, particularly targeting SSL VPN accounts with multi-factor authentication. Cybersecurity analysts from Arctic Wolf report that the attackers utilize legitimate tools, such as Datto’s remote monitoring solution, to mask their activities, thereby evading detection and carrying out effective intrusions. This situation highlights the urgent …

This festive season has witnessed a significant rise in cyber fraud cases in India, with reports indicating a nearly 40% increase in attacks, largely attributed to AI-driven tools. Individuals are becoming targets of personalized scams, as exemplified by a Mumbai content writer who was deceived through a fraudulent request for payment disguised under her roommate’s likeness. Experts note that these sophisticated scams leverage machine learning to create contextually relevant phishing messages that exploit recent search …