Alexander Culafi

News Writer at SearchSecurity

Email address: a****@****.com
Influence score: 53
Phone: (XXX) XXX-XXXX
Location: United States
Languages:

• English
  Covering topics:
• Computers & Technology

Recent Articles

Microsoft targets AI deepfake cybercrime network in lawsuit

Microsoft amended a lawsuit this week naming four defendants it said bypassed Azure OpenAI guardrails to generate illicit AI deepfakes.
Published over 1 year ago

CrowdStrike: China hacking has reached 'inflection point'

CrowdStrike observed a 150% increase in China-nexus threat activity in 2024, according to the vendor's latest Global Threat Report.
Published over 1 year ago

Black Basta ransomware leak sheds light on targets, tactics

According to new research from VulnCheck, 62 CVEs were mentioned in the Black Basta ransomware gang chat logs leaked last week.
Published over 1 year ago

Dragos: Ransomware attacks against industrial orgs up 87%

In Dragos' 'Year in Review' report for 2025, the OT/ICS security vendor found that ransomware attacks against industrial organizations increased by 87%.
Published over 1 year ago

CISA, FBI warn of Ghost/Cring ransomware attacks

In an advisory published Wednesday, CISA warned in a joint cybersecurity advisory of ransomware attacks conducted by a group known as Ghost.
Published over 1 year ago

Risk & Repeat: Salt Typhoon hasn't stopped hacking

This podcast episode discusses the Chinese nation-state threat group Salt Typhoon and its ongoing activities against telecommunications providers.
Published over 1 year ago

Palo Alto Networks PAN-OS vulnerability exploited in the wild

Palo Alto Networks said PAN-OS authentication bypass vulnerability CVE-2025-0108 came under attack in the wild following publication of a PoC exploit.
Published over 1 year ago

Salt Typhoon compromises telecom providers' Cisco devices

Recorded Future observed Chinese nation-state threat group Salt Typhoon targeting Cisco devices belonging to telecom providers in December and January.
Published over 1 year ago

Fortinet discloses second authentication bypass vulnerability

Fortinet on Tuesday disclosed another authentication bypass vulnerability. Tracked as CVE-2025-24472, it affects versions of FortiOS and FortiProxy.
Published over 1 year ago

Apple zero day used in 'extremely sophisticated attack'

Apple announced on Monday it patched a zero-day flaw in iPads and iPhones that could enable an attacker to disable the USB Restricted Mode security feature.
Published over 1 year ago

Trimble Cityworks zero-day flaw under attack, patch now

Cityworks, an EAM product from software maker Trimble, has a newly disclosed zero-day vulnerability that is capable of remote code execution.
Published over 1 year ago