Cybercriminals are using CSS in emails to track their victims, learn more about them, and redirect them to phishing pages, experts have warned.
Cybersecurity researchers at Cisco Talos outlined how CSS (Cascading Style Sheets) is used in emails to control the design, layout, and formatting of email content. Businesses use it not only to make the emails look better, but also to keep the layout consistent across different email clients. There is nothing inherently malicious about CSS but, as is the case with many other legitimate tools, it is being abused in attacks.
"The features available in CSS allow attackers and spammers to track users' actions and preferences, even though several features related to dynamic content (e.g., JavaScript) are restricted in email clients compared to web browsers," a Cisco Talos researcher said in a report.
Advanced filtering techniquesThrough CSS, cybercriminals can hide content in plain sight, thus bypassing email security solutions. They can also use it to redirect people to phishing pages, it was said. The tool can be used to monitor user behavior which, in turn, can lead to spear-phishing or fingerprinting attacks.
"This abuse can range from identifying recipients' font and color scheme preferences and client language to even tracking their actions (e.g., viewing or printing emails)," they said. "CSS provides a wide range of rules and properties that can help spammers and threat actors fingerprint users, their webmail or email client, and their system. For example, the media at-rule can detect certain attributes of a user's environment, including screen size, resolution, and color depth."
Cisco Talos said the new campaign builds upon a “hidden text ‘salting’” one they uncovered in late January 2025.
To tackle this threat , the researchers suggested IT teams adopt advanced filtering techniques that scan the structure of HTML emails, rather than just their contents. An email security solution could, thus, look for extreme use of inline styles or CSS properties such as “visibility: hidden”. Deploying AI-powered defenses is also recommended.
Via The Hacker News
You might also likeA new part of an ocean plant cell has been discovered that might revolutionize farming one day. The structure can take nitrogen and convert it into the ingredient that helps all organisms grow.
(Image credit: UC Santa Cruz)
HP has been shaking things up at its Amplify 2025 event, unveiling new AI laptops and changing brand names in a bid to make them easier for would-be buyers to understand. The company offers "i" or "a" versions of its AI laptops, so you can tell at a glance whether a device has an Intel or an AMD processor.
However these aren’t the only players in town - and HP knows it. If you’re a highly mobile professional who needs to stay constantly connected and wants to offload time-consuming tasks to AI, HP has launched the EliteBook 6 G1 series laptop, which includes a 14-inch model with a 40–60 TOPS NPU that’s "purpose-built for knowledge creators to do more."
There are two EliteBook 6 Next Gen AI models to choose from: one with an AMD processor (G1a) and one with a Qualcomm processor (G1q), both in a 14-inch size. While Intel is offered in the standard AI version (less than 40 TOPS NPU), and in the higher-end EliteBook 8 G1 models, it’s not offered at all in the EliteBook 6 Next Gen AI lineup.
Choice of SnapdragonsThe 14-inch EliteBook 6 G1q Next Gen AI PC is powered by a 45 TOPS Snapdragon X, X Plus, or X Elite processor. Memory configurations go up to 64GB LPDDR5X, with storage options ranging from 256GB to 1TB PCIe NVMe M.2 SSD. The 14-inch display comes in multiple options, including WUXGA (1920 x 1200) and WQXGA (2560 x 1600).
Other features of note include an FHD camera, with optional 5MP+IR or AI-enhanced cameras. Audio is delivered through dual stereo speakers by Poly Studio and dual microphones with AI noise reduction.
The laptop also includes a spill-resistant keyboard (optionally backlit with Durakeys) and a Microsoft Precision touchpad. Connectivity options include two USB4 Type-C ports, two USB-A ports, HDMI 2.1, audio jack, RJ45, and an optional Nano SIM. Wireless support includes Wi-Fi 7 or Wi-Fi 6E with Bluetooth 5.4 or 5.3, along with optional 5G WWAN.
Battery options are 48 or 56Wh. The laptop weighs around 1.45 kg and comes in any color you like, as long as it’s silver. Bundled software includes MyHP, HP AI Companion, Microsoft Copilot, Poly Camera Pro, and more.
There’s no word yet on pricing or availability for HP’s sole Qualcomm AI laptop.
You might also likeWe’re big fans of Framework’s modular laptops, which let you choose the components you want, replace or upgrade parts, and even add third-party custom modules, such as this drone destroyer.
It’s almost a surprise that other major laptop manufacturers haven’t followed a similar path, but HP appears to have cottoned on to this approach with its new EliteBook, unveiled today at Amplify 2025.
The enterprise-ready EliteBook 8 G1, with an AMD or Intel processor, is designed to be easily repaired or upgraded, with HP saying the battery, fans, SSD storage and SODIMM memory can be swapped out in under 10 minutes, and the wireless LAN and mobile broadband M.2 cards are also fully accessible and quickly replaced. If that’s not enough, the modular keyboard can also be removed and switched, and the self-aligning display does not require single-use jigs for replacement.
Redesigned inside and outHP says the new EliteBook 8 G1 has been, "redesigned inside and out", offering up to 224% better power efficiency. The Series 8 G1 PCs are also made using a diverse range of recycled materials, including glass, cooking oil, rare earth magnets, magnesium, aluminum and ocean-bound plastic.
There is a choice between next-gen AI PCs (with 40–60 TOPS NPUs) and regular AI PCs (with less than 40 TOPS NPUs). They come in G1a (AMD) or G1i (Intel) models, available in 13-inch (with soldered-in memory), 14-inch, and 16-inch sizes.
All feature a WUXGA (1920x1200) display, a redesigned thinner chassis, new Glacier Silver color, larger trackpad, fingerprint reader in the power button, dual Thunderbolt 4 ports, USB-C and USB-A options, HDMI 2.1, and support for Wi-Fi 6E, Bluetooth 5.3 or 5.4, and optional NFC and Smartcard reader. They support up to 64GB of RAM and up to 2TB of SSD storage.
There’s no word on pricing or availability for the new models yet, but we should know soon.
You might also likeHP has launched a range of new AI laptops at its Amplify 2025 event with a host of new brand names.
The company's 800 Series is now EliteBook 8, and the 600 Series is now EliteBook 6 (both systems come in 13, 14, and 16-inch sizes).
The 400 Series is now ProBook 4 (in 14 and 16-inch sizes). ZBook Firefly is now the ZBook 8 G1i (Intel) and G1a (AMD), ZBook Power is now the ZBook X G1i, Elite Mini/SFF/Tower is now EliteDesk and Elite AiO is now EliteStudio. Clear?
Easy to understandAt the start of the year, Dell decided that the arrival of the AI era meant it was time for a fresh start, and in debuting a new Pro range of laptops, it waved goodbye to the beloved Latitude brand, which was first introduced back in 1994.
The ax swinging didn’t end there, though. The company also debuted a new Pro Max mobile workstation family, which replaced the 32-year-old Precision brand. Intel, which finally has a new CEO, has also been playing the name game recently to try to make things clearer for customers.
While HP’s rebranding isn’t anywhere near as major as Dell’s (it’s also worth noting that more people will be familiar with Dell’s Latitude and Precision brands than any of HP’s brands), it’s still another big change for consumers to get their heads around. At least it’s straightforward enough.
If you want an EliteBook 8 G1 Series laptop, you can differentiate between the models by size (13, 14, 16), processor (G1i for Intel or G1a for AMD), and Next Gen and regular AI models (which offer different TOPS). Once you know what’s what, you can quickly spot the difference between the HP EliteBook 8 G1a 13” Next Gen AI PC and the HP EliteBook 8 G1i 16” AI PC.
Is the rebranding totally necessary? That’s a matter of debate.
“We take a very conventional and pragmatic approach," Tom Butler, Executive Director of Commercial Portfolio and Product Management at Lenovo, recently told NoteBookCheck.
"There is a series name for our ThinkPad products, like T series, L series or E series, with screen sizes in the product name for clarity - T14, T16 and so on. In order to keep it logical and help people keep track, we also put a generational name after. At the moment, we are not making any changes in our direction. Lenovo has solid brand equity, as do our sub-brands like ThinkPad, ThinkBook or Lenovo Yoga for consumers.”
You might also likeNearly 10 years after the iconic Pebble smartwatch was discontinued, the iconic watch is back with two new “Pebble-like” smartwatch models sporting low-power screens and packing a 30-day battery life – designed by Pebble founder Eric Migicovsky.
The limited-run smartwatches will be available from July, running the open-source Pebble OS.
Core 2 Duo (Image credit: Core Devices)The first of the two watches is the Core 2 Duo, a device very similar to the old discontinued Pebble 2, with some improvements.
With four buttons and an ‘ultra-crisp’ 1.26-inch e-paper MIP screen similar to some of the best Garmin watches, this low-power screen allows the Core 2 Duo to maintain long battery life at an impressive 30+ days.
The smartwatch, which comes in white or black polycarbonate frames and matching synthetic straps, also features a speaker and microphone array, step tracking, and sleep tracking.
Interestingly, the sleep tracking feature doesn’t use a heart rate monitor (the Core 2 Duo doesn’t have one) but an accelerometer, which analyzes movement during sleep. A barometer and compass round out the hardware features.
“This is my dream watch," Migicovsky told TechRadar in an exclusive interview. "It is similar to the Pebble Time 2, which we announced in 2016 but never shipped, much to the chagrin of many people who emailed or texted me over the last eight years.
“The core reason why we’re making these is that the market is not meeting the needs of people who want exactly this feature set. There are plenty of options in the AMOLED space… but no one’s making something like this.”
Software-wise, both Pebble OS and its accompanying phone app are completely open-source, making the watch eminently hackable. Migicovsky told us there are already 10,000 apps available for the device thanks to the old Pebble OS infrastructure, and 12,000 developers have signed up to potentially create new ones since the initial announcement.
The new hardware allows developers to use the watch in new ways, such as basic ChatGPT integration using the watch’s speaker and microphone.
“The smartwatch is a great form factor for people being able to do a quick ChatGPT query,” says Migicovsky. “I’m just putting it out there so developers know we’ve got a speaker for something… We’re keeping our options open here.”
The Core 2 Duo will cost $149 (around £115 / AU$235) and will ship in July, available exclusively from Pebble's online store.
Core Time 2 (Image credit: Core Devices)As well as the Core 2 Duo, Migicovsky and his two-person Core Devices company are also debuting the Core Time 2, a premium version with a color screen and heart rate monitor.
Slightly bigger, the Core Time 2 sports a 64-color 1.5-inch e-paper display, comprising 88% more pixels than the Core 2 Duo display. The display is also a touchscreen, primarily because Migicovsky wanted to add complications reminiscent of the best Apple Watches.
“We’re keeping all our buttons, and they will be the primary interface, but I wanted to add a touchscreen – again, mostly to keep our options open – but one key use case is Complications,” says Migicovsky. “Otherwise on Pebble, you have to dig through a menu to get to an app, and at that point, I might as well pull out my phone.
“I love complications on the Apple Watch where you can have a little widget which displays a little information, then you tap on that widget for a larger display.”
The Core Time 2 still packs all the features listed above on the Core 2 Duo, including 30 days of estimated battery life, but has a metal frame instead of the polycarbonate one. The watch will retail for $225 (around £175 / AU$355) and is also shipping in July.
Both watches are available to pre-order now at store.rePebble.com
You might also like...Gaming peripheral maker HyperX has revealed two new gaming headsets as part of the HP Amplify Conference 2025.
The most significant is the HyperX Cloud III S, a new version of the popular HyperX Cloud III wireless gaming headset. It features both low latency 2.4GHz and Bluetooth connectivity modes, offering support for both PC and console. It weighs just 0.74lbs / 340g but boasts seemingly incredible battery life.
According to the manufacturer you're looking at up to 200 hours playtime on Bluetooth, or 120 hours in the 2.4GHz mode. That's an awful lot of juice per charge and should mean that you spend less time charging your headset, and more time gaming.
It is worth bearing in mind, however, that the headset will be quite slow to charge when the time does come to top it up. HyperX states that it can take up to five hours, which could be a source of annoyance when you just want to dive into a match with friends.
Elsewhere, it features a stainless steel and aluminum frame, plus support for 3D printed magnetic earcup plates. These are sold by HyperX in certain regions and roughly cost between $39.99 and $49.99 depending on the design.
Like other models in its family, the headset also has a detachable boom microphone. It has a uni-directional pickup pattern and should be more than sufficient for chatting with friends.
There's no word on the price at the time of writing, but if its just right this could very well have a chance at being one of the best gaming headsets right now.
(Image credit: HyperX)The other model revealed is the HyperX Cloud Jet Dual wireless gaming headset. This comes in either a sleek blue and white or more plain black and, again, has both 2.4GHz and Bluetooth connectivity. The frame in this model is plastic, suggesting that it could be a more budget-oriented pick.
This is also supported by the lesser battery life, which delivers up to 20 hours in the 2.4GHz mode or 25 hours via Bluetooth.
You might also like...Google is today launching a new upgrade for Gemini called Canvas that allows you to refine documents and code straight from within its AI chatbot.
Canvas is a 'new interactive space' that is 'designed to make creating, refining, and sharing work easy'. Think of Canvas as a writing tool akin to ChatGPT Canvas or Apple Intelligence Writing Tools but built into Gemini with easy exporting to Google Docs.
Canvas can generate written drafts, change the tone of voice, and suggest edits directly from within Gemini. The tool can also streamline the coding process by quickly 'transforming your coding ideas into working prototypes for web apps, Python scripts, games, simulations and other interactive apps.'
That might not sound like the most exciting AI upgrade for most of us, but it opens up even more possibilities with Gemini, which is only a good thing, and not even a week on from Google's last major AI updates.
Just last week Google added Search history to Gemini, allowing users to get even more personalized AI responses based on how they've previously used Google Search. Additionally, Deep Research, Gemini's data analysis and reporting tool was made free alongside Gems, a custom chatbot builder, perfect for creating specific use cases like a counseling bot with AI.
Gemini updates are coming thick and fast, ChatGPT should be worried (Image credit: Google)Google continues to add huge Gemini upgrades almost weekly, with the AI chatbot quickly taking over ChatGPT as my favorite AI chatbot. Last week's Deep Research upgrade to 2.0 Flash which also included free access without a premium plan is fantastic, and I've used Deep Research multiple times this week without paying a dime. It's an excellent tool for getting in-depth info, perfect for work or the sports nerd like me who wants to know about the best fantasy football assets.
I don't use AI writing tools so Canvas isn't that appealing to me, but I'm excited by the cadence of Gemini updates and how focused Google is on building the best AI chatbot possible.
Last week's Search history upgrade could make Gemini the best AI tool on the market, and while it hasn't rolled out to me yet, I'm looking forward to seeing how it improves the Google AI experience.
Not only has Google announced Gemini Canvas today, but it's also upgrading Deep Research to add Audio Overview functionality from NotebookLM, allowing users to create podcasts from the research reports.
While Google's Gemini updates might not always grab the headlines, the constant push to improve the AI tool is worth writing home about. Gemini is one of the best AI chatbots on the market, and it just keeps getting better.
You might also likeAudio Overview is coming to Google’s AI chatbot Gemini, and I think it will change the way we use it for good. You can use Audio Overview to turn documents, slides, and even Deep Research reports into easy-to-listen-to podcasts.
The first time I tried Audio Overview I was blown away by how good it was. The podcasts it creates are essentially 10-minute-long shows narrated by two AI hosts who talk about whatever subject you’ve fed them via Google documents, PDFs, or even YouTube videos.
The point of Audio Overview is to speed up the learning process for students. So, instead of having to read all those books, or watch all those YouTube videos yourself, you can get AI to do it for you and then get it to tell you all the important bits in a short information blast, but as if you were listening to a podcast.
Getting in the mixAudio Overview first appeared as part of Google’s NotebookLM research tool. It was particularly favored by students who didn’t like to read very much, but the technology for creating its AI podcasts worked way better than it had any right to and obviously had implications for projects far beyond the world of education.
Rather than sounding like two boring AI robots discussing a subject academically, the podcast hosts sound as if they were two real humans talking about a subject they both really cared about, with a lot of dynamic back and forth.
I quickly realized there was scope for creating podcasts about pretty much anything using Audio Overview, and I’ve been using it ever since. Now we can use it with Deep Research reports, it will be even better.
Gemini integrationNotebookLM was already free to use, but having Audio Overviews integrated into Gemini just makes them easier to access. Audio Overview is starting to roll out today to Gemini and Gemini Advanced subscribers, globally in English, with more languages coming soon.
They work in Gemini by simply uploading documents into the prompt bar and then choosing Generate Audio Overview from the suggestion chip that pops up. Audio Overviews work in both the web and mobile app versions of Gemini. Go to gemini.google.com to see if they’re available to you yet.
You may also likeThe Fulaim X5M is yet another option in what has become a boom area of content-creation tech: the miniature wireless digital microphone. Designed for vloggers, podcasters and the like, this set is a competitor to the likes of the DJI Mic 2 and Rode Wireless Micro, with clip-on transmitters wirelessly beaming an audio signal to a receiver that can be connected to a smartphone, computer or camera.
Perhaps the main selling point of the X5M is its budget-friendly price, which undercuts premium rivals like DJI, Rode and Sennheiser by a wide margin. That makes it a tempting purchase for newbie content creators who are just getting started, particularly given the flexibility offered by its adapters, along with the ability to record directly onto the transmitter's own 4GB of internal storage.
I'd expect some concessions to be made with any budget product, and with the X5M I'd say the main ones are its rather cheap-feeling build quality, and the fact that its audio quality tops out at 16-bit where premium rivals offer 24-bit and even 32-bit float options. The display on the receiver could do with some tweaks to make it a little more readable too, but none of the above are what I'd call deal-breakers.
If more premium mics are out of your reach, and you want something a little more flexible than the smartphone-only Boya Mini, the Fulaim X5M is well worth a look.
The core Fulaim X5M set with two transmitters, the receiver and charging case (Image credit: Future | Sam Kieldsen) Fulaim X5M: price and release dateDual-transmitter kits with a charging case don’t come much cheaper than the Fulaim X5M. Its list price is $199 / £150 / AU$311, but I’ve found it for far less at many online stores including Amazon US for around $90 / Amazon UK for around £100, so you’ll be paying a lot less than you would for the likes of the DJI Mic Mini or Rode Wireless Micro.
That’s the price for the version of the X5M I was sent for review, which includes built-in recording on the transmitters. An even cheaper version lacking that feature is also available, for around $30 / £22 / AU$35 less.
Both sets are available to buy now from a range of online stores, but it’s worth noting that you can only get the X5M in a full package that also includes two transmitters, one receiver, a charging case, USB-C / Lightning / 3.5mm adapters, two furry windscreens and a USB-C cable; aside from replacement bits like the adapters and magnets, the elements of this kit aren’t available for individual purchase, at least as far as I could tell.
The charging case with two transmitters, the receiver and all three adapters inserted (Image credit: Future | Sam Kieldsen) Fulaim X5M: specs The receiver with its three adapters for Lightning, USB-C and 3.5mm devices. (Image credit: Future | Sam Kieldsen) Fulaim X5M: DesignThe X5M, like many wireless mic packages, comprises two wearable transmitters, a receiver that can be connected to smartphones, tablets, computers and cameras, and a case that not only holds them but recharges their internal batteries. The case also has space for three connector adapters for the receiver (USB-C, Lightning and 3.5mm), a USB-C port for charging, and four LEDs on the front to give you a quick indication of its own battery life.
The whole kit will fit easily in your coat pocket, making the X5M wonderfully portable. I would have liked some kind of pouch or carrying bag to be included in the set though, as there’s nothing to stop the case flipping open in your bag and disgorging its contents. Also, there’s no room in the charging case for included accessories like the two furry windscreens or USB-C cable, so having a bag to hold everything would have made a lot of difference.
I found the general build quality to be okay, if a little cheap and plasticky. Pricier mic sets like the DJI Mic 2, Sennheiser Profile Wireless and Saramonic Ultra are all much sturdier than this – but that’s one reason you have to pay more for them, I suppose. There’s also no waterproofing on any of the elements here – at least nothing mentioned by Fulaim – so if you want to record outdoors in inclement weather you’ll need to exercise caution.
A Fulaim X5M transmitter with its furry windshield attached. (Image credit: Future | Sam Kieldsen)The transmitters are small and lightweight, and can be attached to clothing via a clip or magnet. The clip is nice and strong, but I found the magnet pull to be a little weak, and I wouldn’t want to risk using it on any garment thicker than a lightweight T-shirt, lest it fall off.
Each transmitter has a USB-C port for charging and data transfer, as well as two buttons: one to switch power on/off and another that can be tapped to engage noise reduction tech and held down to start recording. It also has a 3.5mm input, enabling users to attach a third-party lavalier mic.
The receiver has a USB-C port for charging, plus an interface on the back that can accept one of the adapters, allowing it to be connected directly to products with Lightning, USB-C or 3.5mm ports. I tried it on my iPhone 13 and Panasonic GH6 II camera (with the Lightning and 3.5mm ports respectively) and found it to be a secure and fairly low-profile fit.
It also has a small non-touchscreen display that indicates battery life, recording mode, connection status and audio gain. This is a little hard to see from a distance at times, due to the choice of font and icons and its tiny size, but better to have than to not, I suppose.
The receiver also has two hardware buttons: one for power and one to toggle through five levels of gain adjustment.
Fulaim X5M: PerformanceThere’s no sign of 24-bit or 32-bit audio here. The X5M, as befits its budget status, sticks with 16-bit audio – and I think that’s fine for a cheap wireless mic. Having tested the recording quality both indoors and outdoors on a blustery day, I’m more than happy with it – and I strongly suspect anyone who’s upgrading from a built-in mic on their phone or camera will feel the same. The sound is so much richer and fuller from a dedicated mic, while the furry windshield succeeds in cutting out wind noise when you're recording outdoors.
There’s even a noise reduction mode that, while I wouldn’t rely on it in truly challenging conditions, is very effective at reducing background hums – the likes of fans, air conditioners and road noise.
The X5M can record in three different modes: mono (which uses a single transmitter), stereo (where both transmitters record in tandem to create a single recording) and safety (where the second transmitter records at a slight gain reduction, as a backup track in case of the primary track experiencing a sudden loud noise or similar).
Each transmitter can be used for solo recording too, so you can ditch the rest of the set if you’re traveling really light. With 4GB of internal storage, it can record around nine hours of audio.
The X5M's receiver attached to an Apple iPhone 13 via its Lightning port. (Image credit: Future | Sam Kieldsen)Battery life runs closer to six hours, however, with two full-recharge cycles being held in the charging case. In theory, with the charging case in your pocket you can get 18 hours of use out of the X5M before having to track down a wall socket or power bank, which is about average for a wireless mic set.
As for wireless range, Fulaim claims the X5M can work up to a range of about 650ft / 200m – that is, the distance between the transmitter and receiver. That’s in perfect conditions, of course, and I would expect the real-world figure to be a lot lower, although for the vast majority of users range is never going to be an issue. I certainly had no problems with connectivity or transmission during my review period.
Should I buy the Fulaim X5M? Buy it if…You want a versatile wireless mic on a budget
With its trio of adapters for connecting to all types of smartphone plus laptops and cameras, plus solo recording, this is a cheap package that isn’t restricted to a single mode of audio capture.
You’re a beginner content creator
The 16-bit audio recorded by the X5M is so much crisper, weightier, and richer than the sound you’d get from a smartphone or camera’s built-in mic, making it a cheap and simple way to elevate vlog audio.
Don’t buy it if…
You want to record in pro-quality audio formats
The X5M sticks with ‘good enough’ 16-bit audio recording, so demanding professionals who require 24-bit or even 32-bit float recording should look elsewhere – and be willing to spend more money.
You want super-tough build quality
The plasticky build quality, lack of weatherproofing, and lack of a carrying case or bag make this a mic set that needs to be handled with a little care. It’s not necessarily designed for the rough and tumble of frequent outdoor use.
Fulaim X5M: also considerBoya Mini
This ultra-cheap, ultra-compact and ultra-lightweight wireless microphone is designed to work only with smartphones, meaning you can’t connect it to a camera. Like the Fulaim X5M, it records at 16-bit quality rather than the 24-bit offered by some pricier alternatives.
Read our Boya Mini review
DJI Mic Mini
A premium and versatile alternative that’s currently quite a bit pricier than the Fulaim X5M, the Mic Mini features 24-bit audio and Bluetooth connectivity, meaning you can bypass the receiver altogether. Its transmitters are quite a bit smaller than the Fulaim X5M’s too, which is handy if you want something a little more discreet.
Read our DJI Mic Mini review
(Image credit: Future | Sam Kieldsen) How I tested the Fulaim X5MIn order to see how it fared in different environments I tested the Fulaim X5M in a range of scenarios, from the quiet and relatively controlled environment of my home office to the windy coast of southeast England.
I also recorded with it in several different ways: using the transmitter’s built-in recording capability; with the receiver connected to my Apple iPhone 13 using a Lightning adapter; and with the receiver connected to my Panasonic Lumix GH6 II mirrorless camera via its 3.5mm analog adapter.
LockBit affiliates are using vulnerable Fortinet endpoints to target businesses with an updated ransomware strain, experts have warned.
Cybersecurity researchers at Forescout found the threat actor is using two vulnerabilities in Fortinet firewalls, tracked as CVE-2024-55591, and CVE-2025-24472, to deploy an updated ransomware strain named SuperBlack.
Both vulnerabilities had been used in the past before, and both were patched in January 2025 - so the best way to defend against the attacks is to make sure your Fortinet firewalls are up to date.
At least three victimsForescout named the group running the attacks “Mora_001”. Since there are some overlaps in its tactics, techniques, and procedures (TTP) with LockBit, the researchers believe the group could be a LockBit affiliate.
Apparently, SuperBlack is based on the builder that was used in LockBit 3.0 attacks, and which leaked in the past. Furthermore, the ransom note in both LockBit and Mora_001 attacks uses the same messaging address.
Speaking to TechCrunch, senior manager of threat hunting at Forescout, Sai Molige, said there were at least three confirmed cases, but added that “there could be others”.
LockBit was one of the most disruptive and influential ransomware groups around, however, in late February 2024, it was struck by the FBI, and it never fully recovered. The law enforcement seized its website, the data it held, and obtained “thousands” of decryption keys.
It also obtained information about its affiliates which, at the time, counted around 200 groups, and later urged the affiliates to come forward. In February this year, the bulletproof hosting service provider, allegedly used by LockBit, was sanctioned by the US and the UK.
LockBit took roughly a week to get back on its feet and resume operations, but it is possible that many of its affiliates pivoted to other groups, such as RansomHub or Medusa.
You might also likeGermany's would-be next chancellor, Friedrich Merz, won lawmakers' approval to loosen strict debt rules for higher defense spending as doubts mount about the strength of the trans-Atlantic alliance.
(Image credit: Ebrahim Noroozi)