AI Sends Global Crime Syndicates Into Fraud Nirvana

Source: Dark Reading

Organized crime groups are industrializing fraud with AI-powered voice cloning, real-time deepfake video, synthetic identities, automated translation, and persona-management tools. These capabilities help gangs defeat identity verification and scale convincing scams across borders, increasing pressure on financial institutions to strengthen identity proofing, liveness checks, behavioral defenses, and intelligence sharing.

Link to article

Massive ChainDrop npm supply-chain attack infects hundreds of packages

Source: BleepingComputer

The self-propagating ChainDrop worm compromised more than 1,300 npm package versions after attackers breached a maintainer's GitHub account. Malicious releases used legitimate build workflows and provenance records to steal developer, cloud, repository, and CI/CD credentials. Affected organizations should rebuild exposed systems, rotate accessible secrets, and inspect repositories for unauthorized changes.

Link to article

How a $50,000 Exploit Chain Turned Bixby Against Samsung Phones

Source: SecurityWeek

Researchers disclosed how several Samsung Members, Samsung Account, and Bixby vulnerabilities could be chained after a victim clicked a malicious link. The exploit moved between trusted applications and ultimately achieved remote system-level compromise on a Galaxy S25. The researchers earned $50,000 for demonstrating the chain at Pwn2Own Ireland.

Link to article

Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells

Source: The Hacker News

Researchers found an ENDLESSDOORS backdoor embedded in firmware for at least 20 Zbtlink router models. The implant launches at startup, repeatedly contacts command infrastructure, and accepts unauthenticated commands with root privileges. Anyone able to intercept or redirect its communications could potentially obtain an interactive shell and take control of affected routers.

Link to article

N-Able Flaw Exposes MSPs to Worst-Case Scenario

Source: Data Breach Today

Attackers are actively exploiting authentication bypass flaws in N-able's N-central remote management software, including cloud and on-premises deployments. An initial patch did not fully resolve the weakness, prompting an emergency hotfix. Because managed service providers administer many downstream systems, one compromised server could provide access to hundreds or thousands of customer devices.

Link to article