
75% of stolen creds from infostealers target MFA, cookies, risking corporate access
Cybersecurity vendor Immersive reports that infostealer malware now accounts for 75% of all stolen credentials, compromising browser data and authentication tokens.
The Cipher Insider Attack Watch Desk is the part of the Cipher Insider newsroom that covers attacks, malware, scams and the groups behind them. It is a newsroom desk, not a single person. Sections: Cyber Attacks, Malware & Ransomware, Threat Intelligence. Stories start from more than 150 monitored sources. Drafts are prepared with AI assistance and checked by software against the cited sources before they are published. It has published 14 articles so far. See the editorial policy or report an error.

Cybersecurity vendor Immersive reports that infostealer malware now accounts for 75% of all stolen credentials, compromising browser data and authentication tokens.

Federal bankruptcy courts have stopped sending electronic and paper notices after a cybersecurity incident affected BAE Systems-managed infrastructure.

Authorities intercepted a fibre optic link routing terabytes of bandwidth from Thailand to illicit operations in Myanmar.

CERT-In warns that automated agents exploit weak secrets to damage systems within hours, leaving organisations with minimal time to respond.

Security researchers warn TypeSafe’s new System One model lacks safeguards found in traditional LLMs, making it prone to disruption.

Researchers found that Israeli ad firm Discover-Tech helped deliver zero-click spyware to journalists through online advertising networks.

Threat actors use AI to mimic trusted colleagues in email scams that cost organisations billions and steal credentials.

French supermarkets suffered spoiled stock after attackers manipulated remote controls, while Ahold Delhaize stores faced disruption.

The firm verified that tampered units distributed by a Southeast Asian retailer contained spy chips that drained user cryptocurrency wallets.

Brad Smith argues AI faces fewer safety rules than milk, urging the UK to fill the regulatory void left by US self-policing efforts.

This malware uses conditional activation to evade detection, remaining silent until victims access specific financial websites, complicating automated analysis.

Research shows that much of the web’s post-quantum progress is driven by CDN defaults rather than internal infrastructure upgrades, leaving core systems vulnerable.

A malware infection at contractor Nippon Columbia has compromised the personal data of millions of Daiichi Kosho customers and staff members.

Raheim Hamilton pleaded guilty to drug conspiracy, agreeing to surrender over $100 million in Bitcoin and Virginia properties.