Blog – Page 79 – VigilantAI

April 2, 2025
No Comments

Outlaw Group Uses SSH Brute-Force to Deploy Cryptojacking Malware on Linux Servers

April 2, 2025
No Comments

Helping Your Clients Achieve NIST Compliance: A Step by Step Guide for Service Providers

April 2, 2025
No Comments

How SSL Misconfigurations Impact Your Attack Surface

April 2, 2025
No Comments

FIN7 Deploys Anubis Backdoor to Hijack Windows Systems via Compromised SharePoint Sites

April 2, 2025
No Comments

New Malware Loaders Use Call Stack Spoofing, GitHub C2, and .NET Reactor for Stealth

April 1, 2025
No Comments

Over 1,500 PostgreSQL Servers Compromised in Fileless Cryptocurrency Mining Campaign

April 1, 2025
No Comments

Enterprise Gmail Users Can Now Send End-to-End Encrypted Emails to Any Platform

April 1, 2025
No Comments

Lucid PhaaS Hits 169 Targets in 88 Countries Using iMessage and RCS Smishing

April 1, 2025
No Comments

New Case Study: Global Retailer Overshares CSRF Tokens with Facebook

April 1, 2025
No Comments

Nearly 24,000 IPs Target PAN-OS GlobalProtect in Coordinated Login Scan Campaign

AI Becomes the New Backbone of Security Operations, But Challenges Remain September 10, 2025
Security Operations Centers (SOCs) are drowning in noise. The average company now generates close to a thousand alerts a day. For very large enterprises, the number surges past 3,000. Close to half (40% never get fully investigated. Some turn out to be critical. This is outlined in Prophet Security’s new report, “State of AI in […]
Kirsten Doyle
When Innovation Meets Education: Caution Before Celebrating ‘OpenAI for Greece’ September 10, 2025
Generative AI (GenAI) has clear potential in low-risk contexts—such as enhancing productivity, supporting research, and aiding professional workflows. Where it can serve as a powerful, time-saving tool. But this begins to change dramatically when we enter high-risk arenas, particularly education, where minors are involved and formative learning, trust, and their rights need safeguarding. Any steps […]
Anastasios Arampatzis
How to Protect Your VoIP System from DDoS Attacks September 9, 2025
Imagine you walk into your office on a Monday morning. Phones are ringing nonstop, your sales team is preparing for a major client call, and support lines are stacked. There are no outgoing calls, and customers cannot reach you anymore. Then you think it’s a glitch, but it’s a VoIP DDoS attack, a cyberattack that […]
Nnamani Chinwoke
MostereRAT Deploys AnyDesk and TightVNC for Full System Control September 9, 2025
Bad actors are stepping up. FortiGuard Labs has uncovered a phishing campaign that installs MostereRAT, a remote access trojan built to evade defenses and seize full control of a machine. The path is familiar. A phishing email lands in the inbox of a Japanese user. It looks like a business inquiry, routine and harmless. A […]
Kirsten Doyle
Patch Now: Critical SAP S/4HANA Code Injection Flaw Exploited in the Wild September 8, 2025
A newly disclosed vulnerability in SAP S/4HANA has been rated critical, with security researchers warning that exploitation is already underway. The flaw, tracked as CVE-2025-42957, carries a CVSS score of 9.9 and affects S/4HANA systems running S4CORE versions 102 through 108, both in private cloud and on-premise deployments. According to the official CVE record published […]
Kirsten Doyle
Qantas Slashes Executive Bonuses After Cyber Breach September 8, 2025
Qantas has cut short-term bonuses for its top executives by 15% in response to a customer data breach, even as the airline reported a strong year of profits. CEO Vanessa Hudson saw her bonus reduced by about AUD 250,000 under the 2025 remuneration decisions, with the airline saying the adjustment reflected shared accountability across the […]
Kirsten Doyle
The Six Cyber Weak Points Causing Power Grid Stress (And How to Fix Them) September 5, 2025
The Industrial Internet of Things (IIoT) is altering power grid stress by straining outdated systems and broadening the cyberattack surface. With much of the infrastructure aging, the grid is left increasingly vulnerable to both physical and digital threats. Threat actors like hackers and other risks like natural disasters, and modernization have left utilities incoherent. Some […]
Emily Newton
Attackers Exploit Grok AI to Spread Malware via Promoted Ads September 5, 2025
Bad actors are exploiting Grok AI to push malware through promoted ads on X, in a scheme researchers are calling “Grokking.” The method, uncovered by Guardio Labs researcher Nati Tal, takes advantage of how Grok parses hidden fields in ads. Malvertisers post videos with adult content baits, but avoid direct links in the main body […]
Kirsten Doyle
Users Share Personal, Emotional, Confidential Info with ChatGPT September 5, 2025
ChatGPT users are routinely sharing personally identifiable information (PII), sensitive emotional disclosures, and confidential material with the AI platform, analysis from SafetyDetectives has revealed. The cybersecurity reviewer’s deep dive into 1000s of ChatGPT conversations, leaked in August 2025, confirms what many already suspected: many internet users aren’t fully aware of how the AI model handles […]
Josh Breaker Rolfe
Copilots to Agents: The Acceleration of AI-Driven Decision Making September 4, 2025
GenAI is advancing at an unprecedented pace. Where Copilots once offered support and recommendations, we now witness the emergence of agentic AI. These systems can autonomously make decisions, complete intricate tasks, and interact seamlessly across platforms with limited human supervision. This transformation represents a major milestone for enterprise technology, presenting both vast opportunities and new […]
Janne Saarela

Category: Blog

Outlaw Group Uses SSH Brute-Force to Deploy Cryptojacking Malware on Linux Servers

Helping Your Clients Achieve NIST Compliance: A Step by Step Guide for Service Providers

How SSL Misconfigurations Impact Your Attack Surface

FIN7 Deploys Anubis Backdoor to Hijack Windows Systems via Compromised SharePoint Sites

New Malware Loaders Use Call Stack Spoofing, GitHub C2, and .NET Reactor for Stealth

Over 1,500 PostgreSQL Servers Compromised in Fileless Cryptocurrency Mining Campaign

Enterprise Gmail Users Can Now Send End-to-End Encrypted Emails to Any Platform

Lucid PhaaS Hits 169 Targets in 88 Countries Using iMessage and RCS Smishing

New Case Study: Global Retailer Overshares CSRF Tokens with Facebook

Nearly 24,000 IPs Target PAN-OS GlobalProtect in Coordinated Login Scan Campaign

[email protected]