Incidents tagged mail

The vulnerability crisis: How AI is shrinking the window for defense TechRadar

Flickr experienced a data breach due to a security vulnerability found within a system managed by a third-party email service provider. This flaw potentially exposed user names, email addresses, IP addresses, and activity logs, though sensitive user passwords and financial information remained secure.

Threat actors are employing Large Language Models (LLMs) to create sophisticated phishing campaigns, leveraging LLM-generated code to obfuscate malicious payloads within Scalable Vector Graphics (SVG) files. These meticulously crafted SVG files bypass email security by disguising embedded JavaScript with business terminology, ultimately redirecting victims to fake login pages for credential harvesting.