The cybercrime collective "Scattered LAPSUS$ Hunters" (SLH) is offering $500–$1,000 per call to recruit women for voice phishing attacks. This strategy aims to increase the success rate of help desk impersonation to bypass MFA via prompt bombing and SIM swapping.
Four malicious NuGet packages (NCryptYo, DOMOAuth2_, etc.) were discovered exfiltrating ASP.NET Identity data and creating persistent backdoors. These packages had over 4,500 downloads before removal.
Research indicates that "Shadow AI" (unauthorized use of AI tools) is becoming a major data exposure risk. Security teams are struggling to gain visibility into AI integrations and automated agents used by employees.