Advertisement

Mandiant

Leucauge venusta, known as the orchard orbweaver spider, resting in the center of her web in Charleston, South Carolina.
Leucauge venusta, known as the orchard orbweaver spider, resting in the center of her web in Charleston, South Carolina. (Daniela Duncan/Getty Images)

Scattered Spider weaves web of social-engineered destruction

The cybercrime ring has infiltrated more than 100 businesses since 2022, including more than a dozen since it regrouped earlier this year.
Person’s hand holding an iPhone and using the Luma Labs Dream Machine artificial intelligence video generator, a generative AI system for creating videos, Lafayette, California, June 26, 2024. (Photo by Smith Collection/Gado/Getty Images)

Mandiant flags fake AI video generators laced with malware

A Vietnam-based group has spread thousands of advertisements, fake websites and social media posts promising access to popular prompt-to-video AI generation tools, delivering infostealers and backdoors instead. 
Advertisement
The four most frequently exploited vulnerabilities were all contained in edge devices, such as VPNs, firewalls and routers. (Getty Images)

Attackers hit security device defects hard in 2024

Mandiant said exploits were the most common initial access vector last year, linking software defects to 1 in 3 attacks. The most commonly exploited vulnerabilities affected network…
Advertisement
Advertisement