A China-aligned threat actor known as SlippyNunchucks has been attributed to a Domain Name System (DNS) hijacking operation abusing insecure HTTP…
Category: EN
Russia Takes Down VasyGrek Cybercrime Network After Years of Phishing Attacks
Russian authorities have arrested three suspected members of the cybercrime group VasyGrek, also known as Fluffy Wolf, and dismantled the infrastructure…
Arkose Labs expands Agent Trust Manager to govern agent sessions
Arkose Labs has expanded Arkose Agent Trust Manager to help businesses control agentic traffic. Companies can classify agent sessions, apply allow,…
Hackers Poison cPGuard Updates, Compromising Nearly 3,000 Servers
A cPGuard supply chain attack hit nearly 3,000 Linux servers, exposing sensitive credentials and prompting urgent security checks.
Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM’s Memory
Two flaws in the Xen hypervisor allow a malicious guest virtual machine (VM) to read and write the memory of other VMs on the same host, including dom0.…
APT29-Linked Campaign Uses Compromised Websites to Target iOS and Android Devices
Russia-linked cyberespionage hackers have compromised a legitimate web analytics script to distribute sophisticated spyware targeting Apple iOS and Google…
Rubrik hosts NAS backups in isolated, immutable vaults
Rubrik has announced Rubrik-Hosted Protection for On-Premise Unstructured Data. The offering is built on Rubrik’s Network Attached Storage (NAS) Cloud…
Radio With No Radar: Why Agent Runtime Security Fails Without the Layers Beneath It
Nearly every agent security pitch now ends on the same promise: the product stops the bad action in real time. The promise holds for one kind of agent,…
CISA Warns of Actively Exploited WordPress RCE Flaw
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that attackers are actively exploiting a recently patched, high-severity…
A tiny supercurrent could unlock quantum information without destroying it
Researchers have proposed a breakthrough technique for reading quantum information without destroying the delicate states that make quantum computers…
Gartner Report: The Attack Path is Closing Faster than Most Teams Can Patch
Security teams have never lacked vulnerability data. The harder problem is deciding which issues create a credible path to business impact, then acting…
ChatGPT Lockdown Mode Bypass Reveals a Wider Challenge in AI Security
Check Point Research (CPR) discovered a vulnerability that bypassed ChatGPT Lockdown Mode, a security feature designed to reduce prompt-injection-driven…
Anthropic won’t fix a Claude Dispatch flaw that could let attackers execute remote commands across corporate boundaries
Jessica Lyons reports: A vulnerability in Anthropic’s Claude products lets any browser extension that can control Claude Dispatch make Claude Desktop run…
Silk Road: Ross Ulbricht Put His Real Gmail in a Job Ad
Silk Road was the dark web market run as Dread Pirate Roberts. How a 2011 job advert with Ross Ulbricht’s own Gmail address helped the FBI identify him.
Israeli Start-Up Says Human Error Led To AI Hacks
Tel Aviv-based start-up Irregular Security says human error, time pressures allowed AI models to escape isolation and carry out hacks in testing
Cyberattack on Norway’s aid agency may have swept up all user data
The names and email addresses of 20,614 people registered on Norad’s Grants Portal may have ended up in the hands of attackers, Norway’s development aid…
Post-Quantum Questions to Ask Your Vendors
CISA, the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) and the National Security Agency (NSA) released joint guidance…
Cyberattack on French plasma stores is enough to make your blood boil
Attackers reportedly set cold-room controls to 110°C, but safeguards prevented stock losses
India Warns of New AI-Driven Cyber-Attacks Targeting Financial and Crypto Businesses
The Indian CERT said a new cyber malicious group tracked as ‘Crafty Flacon’ is using Chinese-made AI tools to attack fintech and crypto organizations
Zyxel GS1900 Switches Vulnerable Despite Patch
Zyxel GS1900 series network switches that received a security patch earlier this year remain vulnerable to active exploitation, according to research from…