Threat actors carried out a sophisticated identity attack by luring victims to a bogus KeePass password manager download site. After installing the malicious software, the attackers downloaded and launched a Cobalt Strike tool for command-and-control operations, exporting the existing KeePass password database. The attackers, linked to Black Basta, encrypted VMware ESXi datastores, causing the VMs to fail. The incident underlines the need for users to verify software sources and the risks of over-reliance on credentials.

CrowdStrike announces integration with Nvidia Enterprise AI Factory
Organizations can now integrate CrowdStrike’s cybersecurity protection into their Nvidia Enterprise AI Factory deployments, enhancing security measures while utilizing AI technologies for improved operational efficiency