HACKERS TRAIN NEWCOMERS ON EXPLOITING SECURITY GAPS
■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE
Threat actors are actively recruiting and training inexperienced attackers to identify and exploit vulnerabilities in corporate security programs. A popular underground hacking tutorial reveals how modern attackers systematize the process of finding and profiting from weak defenses.
■ MORE FROM THE SECURITY DESK
A new Magecart skimming operation is leveraging Stripe's API infrastructure to both deliver card-stealing malware and exfiltrate payment data from compromised checkout pages.
A former IBM cybersecurity executive filed a lawsuit alleging that IBM and AT&T concealed repeated foreign hacker breaches from US government authorities, violating disclosure laws.
OpenAI's Sam Altman, Anthropic's Dario Amodei, and other tech executives have signed an open letter urging US lawmakers to strengthen oversight of synthetic DNA sequences. The signatories warn that improved tracking is needed to prevent AI-assisted development of bioweapons.
A supply-chain attack has compromised 36 packages on npm with IronWorm, a new infostealer malware. The attack targets developers using the Node Package Manager ecosystem.