"AI-powered ransomware has arrived with 'PromptLock.'"

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 27 August 2025, 1602 UTC.

Content and Source via email subscription from https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Fwww.darkreading.com%2Frss%2Fall.xml

Please check subscription link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Dark Reading

143K followers40 articles per week

#security#tech

64

Today

AI-Powered Ransomware Has Arrived With 'PromptLock'

AI fuels new ransomware attacks

•

by Becky Bracken / 2h

Researchers raise the alarm that a new, rapidly evolving ransomware strain uses an OpenAI model to render and execute malicious code in real time, ushering in a new era of cyberattacks against enterprises.

Yesterday

Philippines Power Election Security With Zero-Knowledge Proofs

by Mercedes Cardona / 8h

While 34 countries worldwide already use some form of e-voting, the Philippines can serve as a model for what a secure online voting operation looks like.

When One Hospital Gets Ransomware, Others Feel the Pain

by Arielle Waldman / 8h

Without key security defenses, including backup recovery and multifactor authentication implementation, all parties, including neighboring hospitals and patients, suffer.

African Law Enforcement Agencies Nab Cybercrime Syndicates

African cybercrime crackdown succeeds

•

by Robert Lemos, Contributing Writer / 10h

African nations work with Interpol and private-sector partners to disrupt cybercriminal operations on the continent, but more work needs to be done.

1M Farmers Insurance Customers' Data Compromised

Farmers Insurance data breach investigation

•

by Kristina Beek / 19h

Though the company is informing its customers of the breach, Farmers isn't publicly divulging what kinds of personal data were affected.

Malicious Scanning Waves Slam Remote Desktop Services

by Rob Wright / 19h

Researchers say the huge spike of coordinated scanning for Microsoft RDP services could indicate the existence of a new, as-yet-undisclosed vulnerability.

Citrix Gear Under Active Attack Again With Another Zero-Day

Citrix patches NetScaler zero-day vulnerabilities

•

by Jai Vijayan, Contributing Writer / 19h

The flaw is one of three that the company disclosed affecting its NetScaler ADC and NetScaler Gateway technologies.

Data I/O Becomes Latest Ransomware Attack Victim

Data I/O suffers ransomware attack

•

by Kristina Beek / 20h

The "incident" led to outages affecting a variety of the tech company's operations, though the full scope of the breach is unknown.

Hook Android Trojan Now Delivers Ransomware-Style Attacks

Hook Trojan adds ransomware features

•

by Elizabeth Montalbano, Contributing Writer / 22h

New features to take over smartphones and monitor user activity demonstrate the continued evolution of the malware, which is now being spread on GitHub.

The Hidden Risk of Consumer Devices in the Hybrid Workforce

by Gene Moody / 1d

Until businesses begin to account for uncontrolled variables in their threat models, attackers will continue to exploit the weakest link in the chain.

Aug 25, 2025

Hackers Lay in Wait, Then Knocked Out Iran Ship Comms

by Jai Vijayan, Contributing Writer / 1d

Lab-Dookhtegen claims major attack on more than 60 cargo ships and oil tankers belonging to two Iranian companies on US sanctions list.

FTC Chair Tells Tech Giants to Hold the Line on Encryption

FTC warns companies against foreign pressure

•

by Kristina Beek / 1d

The chairman sent letters out to companies like Apple, Meta, and Microsoft, advising them not to adhere to the demands of foreign governments to weaken their encryption.

ClickFix Attack Tricks AI Summaries Into Pushing Malware

by Alexander Culafi / 1d

Because instructions appear to come from AI-generated content summaries and not an external source, the victim is more likely to follow them without suspicion.

Fast-Spreading, Complex Phishing Campaign Installs RATs

by Elizabeth Montalbano, Contributing Writer / 1d

Attackers not only steal credentials but also can maintain long-term, persistent access to corporate networks through the global campaign.

Securing the Cloud in an Age of Escalating Cyber Threats

by Drew Firment, Matthew Lloyd Davies / 2d

As threats intensify and cloud adoption expands, organizations must leave outdated security models behind.

Aug 22, 2025

Silk Typhoon Attacks North American Orgs in the Cloud

by Nate Nelson, Contributing Writer / 4d

A Chinese APT is going where most APTs don't: deep into the cloud, compromising supply chains and deploying uncommon malware.

ReVault Flaw Exposed Millions of Dell Laptops to Malicious Domination

by Becky Bracken / 4d

A bug in the control board that connects peripheral devices in commonly used Dell laptops allowed malicious access all the way down to the firmware running on the device chip, new research finds.

Apple Intelligence Is Picking Up More User Data Than Expected, Researcher Finds

by Becky Bracken / 4d

Music tastes, location information, even encrypted messages — Apple's servers are gathering a "surprising" amount of personal data through Apple Intelligence, Lumia Security's Yoav Magid warns in his new analysis.

Interpol Arrests Over 1K Cybercriminals in 'Operation Serengeti 2.0'

by Kristina Beek / 4d

The operation disrupted countless scams, and authorities seized a significant amount of evidence and recovered nearly $100 million in lost funds.

The Growing Challenge of AI Agent and NHI Management

by Michael Morgenstern / 5d

The growing ecosystem of agents, chatbots, and machine credentials that outnumber human users by an order of magnitude is creating a poorly understood but potentially major security issue.

Apple Patches Zero-Day Flaw Used in 'Sophisticated' Attack

CVE-2025-43300

•

by Rob Wright / 5d

CVE-2025-43300 is the latest zero-day bug used in cyberattacks against "targeted individuals," which could signify spyware or nation-state hacking.

Insurers May Limit Payments in Cases of Unpatched CVEs

by Robert Lemos, Contributing Writer / 5d

Some insurers look to limit payouts to companies that don't remediate serious vulnerabilities in a timely manner. Unsurprisingly, most companies don't like those restrictions.

Do Claude Code Security Reviews Pass the Vibe Check?

AI coding tools enhance learning

•

by Ericka Chickowski, Contributing Writer / 5d

AI-assisted security reviews from Anthropic and others could help level up enterprise application security in the era of vibe coding.

Personal Liability, Security Become Bigger Issues for CISOs

by Robert Lemos, Contributing Writer / 5d

While the furor from CISO prosecutions has died down, worries continue over a lack of liability protections and potential targeting by cybercriminals and hackers for their privileged roles.