Crypto casino Duelbits has confirmed a cybersecurity breach that drained approximately $7 million from its hot wallets, forcing the platform offline while…
Category: Cyber Security News
New MacSync Malware Turns macOS Apps Into Tools for Crypto and Password Theft
MacSync, a fast-changing macOS information stealer, has returned with a more complex delivery chain aimed at people who use cryptocurrency and developer…
Bitget Hot Wallet Hacked – Attackers Stole $351.6 Million From Hot Wallets
Cryptocurrency exchange Bitget has confirmed a security breach affecting approximately $351.6 million in assets after unauthorized transfers were detected…
Cloudflare Containers Vulnerability Could Leak Data Between Customer Workloads
Cloudflare has patched a cross-tenant data exposure vulnerability in its Containers platform across its global, multi-tenant cloud computing…
Researchers Found a New Way to Break RSA that Doesn’t Require Factoring the Key
Security researchers have demonstrated a faster way to undermine certain RSA deployments without factoring the public modulus, challenging the assumption…
AvisLoader Windows Malware That Learned to Survive Even After Its Servers Are Taken Down
AvisLoader is a Windows malware loader built to keep taking instructions after server takedowns. That makes it difficult to disrupt by simply removing a…
Fake PDF Files Hide Konni Malware Campaign Targeting Ukraine Organizations
A newly documented campaign targeting people and organizations focused on Ukraine uses document-themed Windows shortcuts to install a malware downloader…
Malicious Firefox Extension Disguised as PDF Tool Steals Google Account Sessions
A Firefox add-on posing as a tool for opening protected PDF documents can quietly turn a signed-in browser into a route to Google account theft. It waits…
Hackers Exploit Critical Check Point VPN Flaws to Gain Remote Access Without Login
Check Point has warned that attackers are actively exploiting two critical vulnerabilities in its VPN and management products, allowing unauthenticated…
New Galago Ransomware Operation Emerges With Links to Panzer Group
Galago is a new ransomware operation drawing attention because it claims a partnership with the Panzer group. That matters, but its reach is uncertain:…
New Android Banking Trojan Uses AI-Built Overlays to Steal Users’ Banking PINs
A new Android banking trojan is turning an app download into a banking PIN trap. Called RemControl, it hides behind fake download pages for a television…
OpenAI Agent Hacked Australian Government Medicare Portal in World’s First Rogue AI Breach
An autonomous OpenAI agent breached an Australian government Medicare statistics portal after a research task escalated into unauthorized system access,…
Roundcube Webmail SQL Injection Vulnerability Exploited in the Wild
A critical security issue affecting Roundcube Webmail is now being exploited in the wild, prompting administrators to update exposed installations…
Microsoft Rebuilds the SOC with AI Agents, SIEM Integration and Machine-Speed Defense
Cyberattacks can move faster than a security team can investigate them. Attackers increasingly use AI agents to automate steps that once needed several…
Apache Tomcat Update Fixes WebSocket and HTTP/2 Flaws Affecting Server Security
Apache Software Foundation has released Tomcat 11.0.26 to address 12 security vulnerabilities spanning WebSocket, HTTP/2, AJP, authentication, and TLS…
The Visibility Gap in Phishing Detection: Where Sandboxing Makes a Difference
The difficult part of phishing detection for a security team often begins after the initial alert. A suspicious URL may look clean at first glance,…
Outerlimit Raises $16M to Build Zero Trust Security Layer for Autonomous AI Agents
Outerlimit has emerged from stealth with $16 million in pre-seed funding to develop a decentralized security and authorization layer for autonomous AI…
GitLab Email Feature Vulnerability Lets Attackers Push Code Into Private Repositories
GitLab’s “Email work item to this project” feature can become a repository-compromise primitive when its private address is exposed, according to research…
Ryuk Ransomware Operator Sentenced for Deploying Malware and Extorting Victim Networks
An Armenian national extradited from Ukraine to the United States has been sentenced to federal prison for his role in Ryuk ransomware attacks that…
New Cpanel Vulnerability Allows Attackers to Access Other Users’ Accounts
cPanel has patched three newly disclosed security vulnerabilities that threaten tenant isolation on shared-hosting servers, including a permissions flaw…