Sophos AI at Black Hat USA ’25: Anomaly detection betrayed us, so we gave it a new job

Threat actors have been observed concealing malicious code in images to deliver malware such as VIP Keylogger and 0bj3ctivity Stealer as part of separate campaigns. “In both campaigns, attackers hid malicious code in images they uploaded to archive[.]org, a file-hosting website, and used the same .NET loader to install their final payloads,” HP Wolf Security…

Luke Alsford reports: A prestigious IVF clinic has confirmed Russian hackers broke into their systems used by thousands of couples across the UK after Metro revealed the huge data breach. The London Women’s Clinic, which offers IVF, egg freezing and other fertility treatments at 17 centres across the country, was compromised by the ransomware gang Qilin. A……

Redmond’s AI Red Team says human involvement remains irreplaceable in addressing nuanced risks. The post AI Won’t Take This Job: Microsoft Says Human Ingenuity Crucial to Red-Teaming appeared first on SecurityWeek.

To those who think they will not get harsh sentences if they are a teenager or committed their crimes as a teenager, you might want to read this press release from the DOJ on February 11: Alan W. Filion, 18, of Lancaster, California, was sentenced today to 48 months in prison for making interstate threats…

Dysruption Hub reports what sounds like a very serious cyberattack affecting the University of Mississippi Medical Center (UMMC): University of Mississippi Medical Center said a cybersecurity attack knocked multiple IT systems offline Thursday, cutting off access to its Epic electronic medical records platform and prompting the Jackson-based system to close clinics and cancel outpatient care…….

Continuous Threat Exposure Management (CTEM) has moved from concept to cornerstone, solidifying its role as a strategic enabler for CISOs. No longer a theoretical framework, CTEM now anchors today’s cybersecurity programs by continuously aligning security efforts with real-world risk. At the heart of CTEM is the integration of Adversarial Exposure Validation (AEV), an advanced, offensive