Abuse covers the misuse of accounts, services, and systems for fraud, intrusion, harassment, or other harmful cyber activity.
Search across headline titles and summaries.
Background for this topic.
Abuse in cybersecurity means using systems, networks, or services in unauthorized or harmful ways, such as sending spam, hijacking accounts, or launching Distributed Denial of Service (DDoS) attacks. It often exploits weak authentication, misconfigurations, or gaps in policies to gain access or disrupt services. Common abuse techniques include credential stuffing, phishing, and using compromised infrastructure to amplify attacks.
Managing abuse is critical because it can degrade service availability, expose sensitive data, and damage organizational reputation. Security teams focus on detecting unusual activity patterns, enforcing multi-factor authentication, and applying rate limits to reduce automated abuse. Timely abuse reporting and automated detection tools help identify and block malicious behavior, making abuse mitigation a key part of maintaining secure and reliable systems.
Weekly headline count for the current query.
IWF and NCA warn that growing numbers of images and videos are being manipulated into sexual abuse material
Proton uses machine learning models to detect abuse of its services – especially email addresses used by cybercriminals
Push Security says threat actors are delivering malware hosted on chatgpt.com/s/ domain
macOS LOTL techniques bypass detection using native tools and metadata abuse
Null subject phishing campaigns bypass filters and target VIPs with QR code and RMM abuse
Attackers are abusing Microsoft 365 mailbox rules to hide activity, exfiltrate data and retain access after account compromise, researchers warn
OpenAI’s Safety Bug Bounty program seeks to address AI safety vulnerabilities beyond traditional security flaws
PixRevolution Android trojan hijacks Brazil’s PIX payments in real time using accessibility abuse
Multi-stage malware campaign targets hospitality organizations using social engineering and abuse of MSBuild.exe
Trend Micro said the use of AI platforms to create and host fake CAPTCHA pages helps attackers develop more sophisticated phishing campaigns at scale and speed
Cisco Talos found that abuse of remote services and remote access software are the most prevalent ‘pre-ransomware’ tactics deployed by threat actors
Hackers are using legitimate red team tool Hexstrike-AI to simplify and speed up vulnerability exploitation
Darktrace observed a coordinated campaign on customer SaaS accounts, all of which involved logins from IP addresses linked to VPS providers
Most online merchants now believe customers pose as big a threat as professional fraudsters
The Israeli spyware maker must pay $444,719 in compensatory damages to Meta and $167.25m in punitive damages
Threat actors are exploiting cloud platforms like Adobe and Dropbox to evade email gateways and steal credentials
From March 17, Ofcom will enforce rules requiring tech platforms operating in the UK to remove illegal content, including child abuse material
US and Europol dismantle neo-Nazi child abuse network in global crackdown against online exploitation
Google highlighted significant abuse of its Gemini LLM tool by nation state actors to support malicious activities, including research and malware development
Browser-based cyber-threats surged in 2024, with credential abuse and infostealers on the rise