#enterprise-cybersecurity — Public Fediverse posts

How to Stay Protected

XMRig Malware Campaigns Target Businesses

Cybersecurity threats continue to evolve, and one of the most persistent threats facing businesses today involves cybercriminals abusing the popular XMRig mining software. While XMRig is a legitimate, open-source cryptocurrency miner used by many enthusiasts to mine Monero (XMR), attackers frequently modify or secretly install it on corporate computers to generate profits without the owner’s knowledge.

In this article, we’ll explain how XMRig is being misused in corporate environments, the risks to businesses, how these attacks work, and the best practices to prevent them.

What Is XMRig?

XMRig is a free and open-source CPU and GPU miner designed primarily for mining Monero (XMR). It is widely respected within the cryptocurrency community because it is efficient, actively maintained, and available for Windows, Linux, and macOS.

By itself, XMRig is not malware. However, cybercriminals often bundle modified versions of XMRig with malicious software or deploy it after compromising a computer.

Why Are Businesses Being Targeted?

Corporate environments provide an attractive opportunity for attackers because they often contain:

• High-performance desktop computers
• Powerful servers
• Multiple workstations
• Cloud infrastructure
• Continuous internet connectivity

Instead of mining cryptocurrency on their own hardware, attackers infect company devices and secretly use the organisation’s computing power.

The result is free cryptocurrency mining at the company’s expense.

How XMRig Malware Gets Installed

Most unauthorised XMRig installations begin after another security weakness has already been exploited.

Common infection methods include:

• Phishing emails containing malicious attachments
• Fake software downloads
• Exploitation of unpatched vulnerabilities
• Weak Remote Desktop Protocol (RDP) passwords
• Stolen administrator credentials
• Trojan malware that downloads additional payloads

Once attackers gain access, they silently install XMRig and configure it to connect to their own mining pools.

Warning Signs of an XMRig Infection

Many organisations discover mining malware only after performance problems become noticeable.

Common symptoms include:

• Constantly high CPU usage
• Increased electricity consumption
• Slow computers
• Loud cooling fans
• Servers running hotter than normal
• Unknown scheduled tasks
• Unexpected outbound network traffic
• Security software being disabled

Some attackers even configure XMRig to stop mining whenever a user opens Task Manager, making detection more difficult.

Business Impact

Although cryptojacking usually does not encrypt files like ransomware, it can still cause significant operational issues.

Potential consequences include:

Reduced Productivity

Employees experience slower computers, affecting daily work.

Higher Operating Costs

Mining consumes CPU resources and electricity around the clock.

Hardware Wear

Continuous high CPU usage can shorten the lifespan of processors, cooling systems, and power supplies.

Security Risks

An XMRig infection often indicates that attackers already have unauthorised access to the network, meaning sensitive business data may also be at risk.

How Organisations Can Protect Themselves

Preventing cryptojacking requires multiple layers of security.

Keep Systems Updated

Install security updates for Windows, Linux, browsers, and all business software as soon as practical.

Use Endpoint Protection

Modern antivirus and endpoint detection solutions can identify suspicious mining behaviour before it becomes widespread.

Enable Multi-Factor Authentication

Protect administrator accounts and remote access services with MFA wherever possible.

Monitor CPU Usage

Investigate unexplained spikes in processor utilisation, especially outside business hours.

Restrict Administrative Privileges

Limit local administrator permissions to reduce the impact of compromised accounts.

Educate Employees

Regular cybersecurity awareness training helps staff recognise phishing emails and other social engineering attacks.

Is XMRig Dangerous?

The software itself is completely legitimate.

The danger comes from unauthorised installation and misuse by attackers.

Many security vendors detect unauthorised XMRig deployments because they are commonly associated with cryptojacking campaigns rather than because the software itself is malicious.

Best Practices for IT Teams

Organisations should adopt a proactive security strategy by:

• Regularly auditing endpoints
• Monitoring unusual network connections
• Reviewing scheduled tasks and startup entries
• Enforcing least-privilege access
• Conducting vulnerability scans
• Backing up critical business data
• Implementing continuous security monitoring

Early detection significantly reduces the financial and operational impact of mining malware.

Final Thoughts

Cryptocurrency mining software like XMRig serves legitimate purposes for individuals and organisations that choose to mine digital assets. However, when cybercriminals secretly deploy XMRig on corporate systems, it becomes part of a cryptojacking attack that wastes resources, increases costs, and may signal a broader security compromise.

Businesses should combine strong cybersecurity practices, employee awareness, regular patching, and continuous monitoring to minimise the risk of unauthorised mining software running within their networks.

By understanding how these attacks operate and responding quickly to suspicious activity, organisations can better protect their infrastructure, maintain productivity, and reduce the likelihood of future compromises.

Frequently Asked Questions

Is XMRig malware?

No. XMRig is legitimate open-source cryptocurrency mining software. It only becomes part of malicious activity when attackers install it without permission.

What cryptocurrency does XMRig mine?

It is primarily designed to mine Monero (XMR) using the RandomX algorithm.

Can antivirus detect XMRig?

Many security products detect unauthorised XMRig installations because they are commonly used in cryptojacking attacks.

How can I tell if my computer is mining cryptocurrency?

Persistent high CPU usage, overheating, increased fan noise, slow performance, and unexplained network connections can all indicate possible cryptojacking.

How to Stay Protected

XMRig Malware Campaigns Target Businesses

Cybersecurity threats continue to evolve, and one of the most persistent threats facing businesses today involves cybercriminals abusing the popular XMRig mining software. While XMRig is a legitimate, open-source cryptocurrency miner used by many enthusiasts to mine Monero (XMR), attackers frequently modify or secretly install it on corporate computers to generate profits without the owner’s knowledge.

In this article, we’ll explain how XMRig is being misused in corporate environments, the risks to businesses, how these attacks work, and the best practices to prevent them.

What Is XMRig?

XMRig is a free and open-source CPU and GPU miner designed primarily for mining Monero (XMR). It is widely respected within the cryptocurrency community because it is efficient, actively maintained, and available for Windows, Linux, and macOS.

By itself, XMRig is not malware. However, cybercriminals often bundle modified versions of XMRig with malicious software or deploy it after compromising a computer.

Why Are Businesses Being Targeted?

Corporate environments provide an attractive opportunity for attackers because they often contain:

• High-performance desktop computers
• Powerful servers
• Multiple workstations
• Cloud infrastructure
• Continuous internet connectivity

Instead of mining cryptocurrency on their own hardware, attackers infect company devices and secretly use the organisation’s computing power.

The result is free cryptocurrency mining at the company’s expense.

How XMRig Malware Gets Installed

Most unauthorised XMRig installations begin after another security weakness has already been exploited.

Common infection methods include:

• Phishing emails containing malicious attachments
• Fake software downloads
• Exploitation of unpatched vulnerabilities
• Weak Remote Desktop Protocol (RDP) passwords
• Stolen administrator credentials
• Trojan malware that downloads additional payloads

Once attackers gain access, they silently install XMRig and configure it to connect to their own mining pools.

Warning Signs of an XMRig Infection

Many organisations discover mining malware only after performance problems become noticeable.

Common symptoms include:

• Constantly high CPU usage
• Increased electricity consumption
• Slow computers
• Loud cooling fans
• Servers running hotter than normal
• Unknown scheduled tasks
• Unexpected outbound network traffic
• Security software being disabled

Some attackers even configure XMRig to stop mining whenever a user opens Task Manager, making detection more difficult.

Business Impact

Although cryptojacking usually does not encrypt files like ransomware, it can still cause significant operational issues.

Potential consequences include:

Reduced Productivity

Employees experience slower computers, affecting daily work.

Higher Operating Costs

Mining consumes CPU resources and electricity around the clock.

Hardware Wear

Continuous high CPU usage can shorten the lifespan of processors, cooling systems, and power supplies.

Security Risks

An XMRig infection often indicates that attackers already have unauthorised access to the network, meaning sensitive business data may also be at risk.

How Organisations Can Protect Themselves

Preventing cryptojacking requires multiple layers of security.

Keep Systems Updated

Install security updates for Windows, Linux, browsers, and all business software as soon as practical.

Use Endpoint Protection

Modern antivirus and endpoint detection solutions can identify suspicious mining behaviour before it becomes widespread.

Enable Multi-Factor Authentication

Protect administrator accounts and remote access services with MFA wherever possible.

Monitor CPU Usage

Investigate unexplained spikes in processor utilisation, especially outside business hours.

Restrict Administrative Privileges

Limit local administrator permissions to reduce the impact of compromised accounts.

Educate Employees

Regular cybersecurity awareness training helps staff recognise phishing emails and other social engineering attacks.

Is XMRig Dangerous?

The software itself is completely legitimate.

The danger comes from unauthorised installation and misuse by attackers.

Many security vendors detect unauthorised XMRig deployments because they are commonly associated with cryptojacking campaigns rather than because the software itself is malicious.

Best Practices for IT Teams

Organisations should adopt a proactive security strategy by:

• Regularly auditing endpoints
• Monitoring unusual network connections
• Reviewing scheduled tasks and startup entries
• Enforcing least-privilege access
• Conducting vulnerability scans
• Backing up critical business data
• Implementing continuous security monitoring

Early detection significantly reduces the financial and operational impact of mining malware.

Final Thoughts

Cryptocurrency mining software like XMRig serves legitimate purposes for individuals and organisations that choose to mine digital assets. However, when cybercriminals secretly deploy XMRig on corporate systems, it becomes part of a cryptojacking attack that wastes resources, increases costs, and may signal a broader security compromise.

Businesses should combine strong cybersecurity practices, employee awareness, regular patching, and continuous monitoring to minimise the risk of unauthorised mining software running within their networks.

By understanding how these attacks operate and responding quickly to suspicious activity, organisations can better protect their infrastructure, maintain productivity, and reduce the likelihood of future compromises.

Frequently Asked Questions

Is XMRig malware?

No. XMRig is legitimate open-source cryptocurrency mining software. It only becomes part of malicious activity when attackers install it without permission.

What cryptocurrency does XMRig mine?

It is primarily designed to mine Monero (XMR) using the RandomX algorithm.

Can antivirus detect XMRig?

Many security products detect unauthorised XMRig installations because they are commonly used in cryptojacking attacks.

How can I tell if my computer is mining cryptocurrency?

Persistent high CPU usage, overheating, increased fan noise, slow performance, and unexplained network connections can all indicate possible cryptojacking.

Ars Technica: Pay up or not? Ransomware surge has victims facing tough choices.. “This has been powered by the rise of malicious AI hacking tools such as WormGPT, FraudGPT and BruteForceAI, according to Dave Spillane, systems engineering director at Fortinet, who notes that confirmed ransomware victims rose 389 percent year-on-year in 2025, from around 1,600 in 2024 to 7,831 globally.”

Ars Technica: Pay up or not? Ransomware surge has victims facing tough choices.. “This has been powered by the rise of malicious AI hacking tools such as WormGPT, FraudGPT and BruteForceAI, according to Dave Spillane, systems engineering director at Fortinet, who notes that confirmed ransomware victims rose 389 percent year-on-year in 2025, from around 1,600 in 2024 to 7,831 globally.”

Associated Press: OpenAI says its AI technology acted on its own in an ‘unprecedented’ hack of another company. “ChatGPT maker OpenAI said Tuesday that its artificial intelligence system hacked into another AI company on its own in what the company called an ‘unprecedented cyber incident.'”

Associated Press: OpenAI says its AI technology acted on its own in an ‘unprecedented’ hack of another company. “ChatGPT maker OpenAI said Tuesday that its artificial intelligence system hacked into another AI company on its own in what the company called an ‘unprecedented cyber incident.'”

Hugging Face: Security incident disclosure — July 2026. “Earlier this week, we detected and responded to an intrusion into part of our production infrastructure. This one was different from anything we had handled before in one important way: it was driven, end to end, by an autonomous AI agent system – and we detected and dissected it largely with AI of our own.”

Hugging Face: Security incident disclosure — July 2026. “Earlier this week, we detected and responded to an intrusion into part of our production infrastructure. This one was different from anything we had handled before in one important way: it was driven, end to end, by an autonomous AI agent system – and we detected and dissected it largely with AI of our own.”

TechCrunch: Another massive data breach exposed millions of driver’s license numbers. “U.S. insurance provider AssuranceAmerica has confirmed a data breach affecting the personal information and driver’s license numbers of 6.9 million people, making it the largest known spill of Americans’ driver’s license information this year.”

TechCrunch: Another massive data breach exposed millions of driver’s license numbers. “U.S. insurance provider AssuranceAmerica has confirmed a data breach affecting the personal information and driver’s license numbers of 6.9 million people, making it the largest known spill of Americans’ driver’s license information this year.”

The Register: Moody Bible Institute breach leaves 2.3M accounts needing salvation, says cyber expert. “Data on more than 2.3 million people associated with Moody Bible Institute (MBI) has been exposed online after the Christian college was targeted by ShinyHunters. The attack was first disclosed by MBI in June, and the extortion crew later leaked the stolen data. Have I Been Pwned has since […]

The Register: Moody Bible Institute breach leaves 2.3M accounts needing salvation, says cyber expert. “Data on more than 2.3 million people associated with Moody Bible Institute (MBI) has been exposed online after the Christian college was targeted by ShinyHunters. The attack was first disclosed by MBI in June, and the extortion crew later leaked the stolen data. Have I Been Pwned has since […]

Gizmodo: Hackers Steal Funds From Polymarket Users, Potentially Millions. “A third-party vendor has been compromised, and some Polymarket users have lost money to hackers, according to a tweet from the betting site. The company has not confirmed how much was lost, though independent monitors on X suggest it could be around $3 million.”

Gizmodo: Hackers Steal Funds From Polymarket Users, Potentially Millions. “A third-party vendor has been compromised, and some Polymarket users have lost money to hackers, according to a tweet from the betting site. The company has not confirmed how much was lost, though independent monitors on X suggest it could be around $3 million.”

BBC: How 100 hospitals switched to pen and paper to defeat a national cyber-attack. “Medical staff had to switch to pen and paper, improvising workarounds to protect patients while IT teams scrambled and the national cyber response centre tried to find out how the hackers had got in – and how they could stop them.”

BBC: How 100 hospitals switched to pen and paper to defeat a national cyber-attack. “Medical staff had to switch to pen and paper, improvising workarounds to protect patients while IT teams scrambled and the national cyber response centre tried to find out how the hackers had got in – and how they could stop them.”

Cloudflare: Celebrating 12 years of Project Galileo. “Twelve years ago this month, Cloudflare launched an ambitious project built on a simple idea: people shouldn’t be knocked offline just because someone more powerful disagrees with them. Today, Project Galileo provides free access to cybersecurity services to more than 3,400 websites belonging to journalists, human rights defenders, and […]

Cloudflare: Celebrating 12 years of Project Galileo. “Twelve years ago this month, Cloudflare launched an ambitious project built on a simple idea: people shouldn’t be knocked offline just because someone more powerful disagrees with them. Today, Project Galileo provides free access to cybersecurity services to more than 3,400 websites belonging to journalists, human rights defenders, and […]

Bleeping Computer: FortiBleed leak exposes Fortinet VPN credentials for 73,000 devices.. “A newly discovered data leak dubbed ‘FortiBleed’ has exposed what appears to be a collection of Fortinet and FortiGate VPN credentials for 73,932 firewall URLs at organizations worldwide.”

Bleeping Computer: FortiBleed leak exposes Fortinet VPN credentials for 73,000 devices.. “A newly discovered data leak dubbed ‘FortiBleed’ has exposed what appears to be a collection of Fortinet and FortiGate VPN credentials for 73,932 firewall URLs at organizations worldwide.”

TechCrunch: The FBI built its own replica small town to simulate real-world cyberattacks.”The Federal Bureau of Investigation is pulling back the curtain on a 22,000 square-foot replica town on its Huntsville, Alabama campus that it built to train law enforcement in simulating and investigating real-world cyberattacks.”

TechCrunch: The FBI built its own replica small town to simulate real-world cyberattacks.”The Federal Bureau of Investigation is pulling back the curtain on a 22,000 square-foot replica town on its Huntsville, Alabama campus that it built to train law enforcement in simulating and investigating real-world cyberattacks.”

PBS: Why a surge of election-related websites could spell rising cyber threats for the midterms. “A new report, first reported by PBS News, warns that November’s midterm elections in the United States will drive ‘elevated’ cyber threats to political organizations, fundraising and media platforms, and that some of the groundwork for election misinformation and disinformation likely is already […]

PBS: Why a surge of election-related websites could spell rising cyber threats for the midterms. “A new report, first reported by PBS News, warns that November’s midterm elections in the United States will drive ‘elevated’ cyber threats to political organizations, fundraising and media platforms, and that some of the groundwork for election misinformation and disinformation likely is already […]

The Register: MyPillow must decide whether to be firm or soft as ransomware crims demand pay. “Crims found the soft spot in the company’s security. MyPillow, the US-based bedding brand founded by election conspiracy theorist Mike Lindell, has been listed by Play ransomware extortionists as an alleged victim.”

The Register: MyPillow must decide whether to be firm or soft as ransomware crims demand pay. “Crims found the soft spot in the company’s security. MyPillow, the US-based bedding brand founded by election conspiracy theorist Mike Lindell, has been listed by Play ransomware extortionists as an alleged victim.”

TechCrunch: NYC Health + Hospitals says hackers stole medical data and fingerprints during breach affecting at least 1.8 million people. “New York public health provider NYC Health + Hospitals says a months-long data breach that allowed hackers to steal personal data, medical records, and fingerprints scans affects at least 1.8 million people.”

TechCrunch: NYC Health + Hospitals says hackers stole medical data and fingerprints during breach affecting at least 1.8 million people. “New York public health provider NYC Health + Hospitals says a months-long data breach that allowed hackers to steal personal data, medical records, and fingerprints scans affects at least 1.8 million people.”

Associated Press: Google disrupts hackers using AI to exploit an unknown weakness in a company’s digital defense. “Google said Monday that it had disrupted a criminal group’s attempt to use artificial intelligence to exploit another company’s previously unknown digital vulnerability, adding to heightened worries across government and private industry about AI’s risks for cybersecurity.”

Associated Press: Google disrupts hackers using AI to exploit an unknown weakness in a company’s digital defense. “Google said Monday that it had disrupted a criminal group’s attempt to use artificial intelligence to exploit another company’s previously unknown digital vulnerability, adding to heightened worries across government and private industry about AI’s risks for cybersecurity.”

Associated Press: Deal reached with hackers to delete data stolen from the Canvas educational platform. “The company that operates online learning system Canvas said it struck a deal with hackers to delete the data they pilfered in a cyberattack that created chaos for students, many of them in the middle of finals.”

Associated Press: Deal reached with hackers to delete data stolen from the Canvas educational platform. “The company that operates online learning system Canvas said it struck a deal with hackers to delete the data they pilfered in a cyberattack that created chaos for students, many of them in the middle of finals.”

Reuters: Germany’s finance watchdog to make targeted inspections amid ‘substantial’ AI risks. “Germany’s banking regulator BaFin warned on Tuesday that cyber risks were ‘growing’ and ‘substantial’ due to ​advances in artificial intelligence, and announced a new ‌division will conduct targeted inspections at financial firms.”

Reuters: Germany’s finance watchdog to make targeted inspections amid ‘substantial’ AI risks. “Germany’s banking regulator BaFin warned on Tuesday that cyber risks were ‘growing’ and ‘substantial’ due to ​advances in artificial intelligence, and announced a new ‌division will conduct targeted inspections at financial firms.”

Associated Press: Canvas system is online after a cyberattack disrupted thousands of schools. “Tens of thousands of students studying for final exams around the world Friday regained access to a key online learning system after a cyberattack had earlier knocked it offline, throwing schools and universities into turmoil.”

Associated Press: Canvas system is online after a cyberattack disrupted thousands of schools. “Tens of thousands of students studying for final exams around the world Friday regained access to a key online learning system after a cyberattack had earlier knocked it offline, throwing schools and universities into turmoil.”

AI agents are reshaping security. Learn why identity-first architecture is replacing perimeter-based defenses in modern systems. https://hackernoon.com/identity-is-the-new-perimeter-managing-ai-agents-as-digital-actors #enterprisecybersecurity

AI agents are reshaping security. Learn why identity-first architecture is replacing perimeter-based defenses in modern systems. https://hackernoon.com/identity-is-the-new-perimeter-managing-ai-agents-as-digital-actors #enterprisecybersecurity

IBM warns AI-powered hackers are coming, so it built AI to fight them

https://fed.brid.gy/r/https://nerds.xyz/2026/04/ibm-ai-cybersecurity-agentic-attacks/

IBM warns AI-powered hackers are coming, so it built AI to fight them

https://web.brid.gy/r/https://nerds.xyz/2026/04/ibm-ai-cybersecurity-agentic-attacks/

The Register: Security boffins scoured the web and found hundreds of valid API keys. “Computer security boffins have conducted an analysis of 10 million websites and found almost 2,000 API credentials strewn across 10,000 webpages.”

The Register: Security boffins scoured the web and found hundreds of valid API keys. “Computer security boffins have conducted an analysis of 10 million websites and found almost 2,000 API credentials strewn across 10,000 webpages.”

Associated Press: Hacked hospitals, hidden spyware: Iran conflict shows how digital fight is ingrained in warfare. “As they fled an Iranian missile strike, some Israelis with Android phones received a text offering a link to real-time information about bomb shelters. But instead of a helpful app, the link downloaded spyware giving hackers access to the device’s camera, location and all its […]

Associated Press: Hacked hospitals, hidden spyware: Iran conflict shows how digital fight is ingrained in warfare. “As they fled an Iranian missile strike, some Israelis with Android phones received a text offering a link to real-time information about bomb shelters. But instead of a helpful app, the link downloaded spyware giving hackers access to the device’s camera, location and all its […]

NextGov: Google launches threat disruption unit, stops short of calling it ‘offensive’ . “Google’s threat intelligence arm officially launched its anticipated disruptive cyber unit on Monday, which comes as the Trump administration seeks to create a more offensive, proactive U.S. culture in cyberspace against foreign hacker groups and cybercriminals.”

NextGov: Google launches threat disruption unit, stops short of calling it ‘offensive’ . “Google’s threat intelligence arm officially launched its anticipated disruptive cyber unit on Monday, which comes as the Trump administration seeks to create a more offensive, proactive U.S. culture in cyberspace against foreign hacker groups and cybercriminals.”

The Register: North Korea’s 100,000-strong fake IT worker army rake in $500M a year for Kim Jong Un . “Researchers at IBM X‑Force and Flare Research have uncovered data that sheds light on how North Korea’s fake IT worker schemes operate and infiltrate companies in order to funnel money back to the regime and steal sensitive information.”

The Register: North Korea’s 100,000-strong fake IT worker army rake in $500M a year for Kim Jong Un . “Researchers at IBM X‑Force and Flare Research have uncovered data that sheds light on how North Korea’s fake IT worker schemes operate and infiltrate companies in order to funnel money back to the regime and steal sensitive information.”

The Register: LexisNexis confirms data breach at Legal & Professional arm, some customer records affected. “Data analytics giant LexisNexis has confirmed its Legal & Professional division suffered a data breach days after the Fulcrumsec cybercrime crew claimed responsibility for the hack.”

The Register: LexisNexis confirms data breach at Legal & Professional arm, some customer records affected. “Data analytics giant LexisNexis has confirmed its Legal & Professional division suffered a data breach days after the Fulcrumsec cybercrime crew claimed responsibility for the hack.”

CNN: FBI investigating ‘suspicious’ cyber activities on critical surveillance network. “The FBI has identified a suspected cybersecurity incident on a sensitive network used to manage wiretaps and intelligence surveillance warrants, and officials are working to determine the seriousness of the incident, according to an FBI statement and a source familiar with the investigation.”

CNN: FBI investigating ‘suspicious’ cyber activities on critical surveillance network. “The FBI has identified a suspected cybersecurity incident on a sensitive network used to manage wiretaps and intelligence surveillance warrants, and officials are working to determine the seriousness of the incident, according to an FBI statement and a source familiar with the investigation.”

The Register: Ransomware payments cratered in 2025, but attacks surged to record highs. “Ransomware gangs pulled in about $820 million in 2025, roughly 8 percent less than the year before, as the share of victims paying dropped to an all-time low of 28 percent. That drop might sound like progress if the wider picture weren’t so bleak: the median ransom demand jumped from $12,738 in 2024 to […]

The Register: Ransomware payments cratered in 2025, but attacks surged to record highs. “Ransomware gangs pulled in about $820 million in 2025, roughly 8 percent less than the year before, as the share of victims paying dropped to an all-time low of 28 percent. That drop might sound like progress if the wider picture weren’t so bleak: the median ransom demand jumped from $12,738 in 2024 to […]

Ars Technica: OpenClaw security fears lead Meta, other AI firms to restrict its use. “A Meta executive says he recently told his team to keep OpenClaw off their regular work laptops or risk losing their jobs. The executive told reporters he believes the software is unpredictable and could lead to a privacy breach if used in otherwise secure environments. He spoke on the condition of anonymity […]

Ars Technica: OpenClaw security fears lead Meta, other AI firms to restrict its use. “A Meta executive says he recently told his team to keep OpenClaw off their regular work laptops or risk losing their jobs. The executive told reporters he believes the software is unpredictable and could lead to a privacy breach if used in otherwise secure environments. He spoke on the condition of anonymity […]

Bleeping Computer: Amazon: AI-assisted hacker breached 600 Fortinet firewalls in 5 weeks. “Amazon is warning that a Russian-speaking hacker used multiple generative AI services as part of a campaign that breached more than 600 FortiGate firewalls across 55 countries in five weeks. A new report by CJ Moses, CISO of Amazon Integrated Security, says that the hacking campaign occurred between […]

Bleeping Computer: Amazon: AI-assisted hacker breached 600 Fortinet firewalls in 5 weeks. “Amazon is warning that a Russian-speaking hacker used multiple generative AI services as part of a campaign that breached more than 600 FortiGate firewalls across 55 countries in five weeks. A new report by CJ Moses, CISO of Amazon Integrated Security, says that the hacking campaign occurred between […]

The Register: UK.gov launches cyber ‘lockdown’ campaign as 80% of orgs still leave door open. “Officials today kicked off a public push urging companies to tighten their digital defenses, complete with familiar advice about basic controls and adopting the long-running Cyber Essentials scheme, after new data showed incidents remain routine and baseline protections are still patchy.”

The Register: UK.gov launches cyber ‘lockdown’ campaign as 80% of orgs still leave door open. “Officials today kicked off a public push urging companies to tighten their digital defenses, complete with familiar advice about basic controls and adopting the long-running Cyber Essentials scheme, after new data showed incidents remain routine and baseline protections are still patchy.”