Kimwolf, a new IoT botnet, has infected over 2 million devices, forcing them to participate in DDoS attacks and relay malicious traffic. It spreads by exploiting residential proxy services.
Why this matters: Organizations must review their IoT and proxy usage to detect and mitigate Kimwolf infections that could enable large-scale attacks.
Krebs on Security
Microsoft patched 6 critical zero-day vulnerabilities in Windows, including remote code execution and privilege escalation flaws actively exploited by attackers.
Why this matters: Developers should review AI-powered tools for prompt injection risks that could lead to data breaches and infrastructure compromise.
Krebs on Security
A new phishing-as-a-service called Starkiller uses real login pages and proxies data to bypass detection and steal credentials, including multi-factor authentication codes.
Why this matters: This advanced phishing technique could lead to more successful account takeovers, requiring security teams to rethink anti-phishing strategies.
Krebs on Security