Meta has acquired AI coding startup Conductor, gaining technology that coordinates work across competing AI coding agents as it seeks a bigger role in…
Category: EN
Hackers Hide Marsalek Malware in Fake Roblox and Fortnite Cheats to Steal Passwords and Crypto Wallet Data
Hackers are hiding a free information stealer called Marsalek inside fake cheats and tools for games such as Roblox, Fortnite, and Counter-Strike 2. The…
Russian APT29 Targets Mobile Users with Watering Hole Attacks
Russia-linked group APT29 targeted iOS and Android users through hijacked websites and a compromised analytics service. Sekoia says a large-scale watering…
Gorbag: Orcs at the border harvesting intelligence from Ukraine
ESET researchers uncover Gorbag, a Russia-aligned group using simple infostealers to harvest data from Ukrainian organizations near the front line
Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes
The large-scale watering hole campaign has been targeting entities in the US and Europe, mainly in Ukraine.
China’s AI guardrails, NCSC’s 2028 warning, more Binance hack details
China planning broad AI guardrails https://www.bloomberg.com/news/articles/2026-11-03/china-plans-broad-ai-guardrails-after-global-security-lapses UK…
5 Active Cyber Threats That Put US Enterprises at Risk in October 2026
October 2026 brought another wave of cyber threats targeting US businesses, with attackers exploiting trusted platforms, legitimate authentication…
Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day
Tracked as CVE-2026-107441, the out-of-bounds write flaw could allow attackers to execute OS commands via crafted HTTP requests.
CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw in WordPress Core to the Known Exploited Vulnerabilities (KEV)…
The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603
Kaspersky researchers analyze a complex fileless cyberattack by Storm-2603 involving ToolShell exploitation and subsequent runtime subversion, and discuss…
Why waiting for quantum computers to arrive could leave your security exposed
By Tim Hudson, President, OpenSSL Corporation For organisations preparing for post-quantum cryptography, one of the biggest risks is assuming they can…
OpenAI Finds GPT-6 Astra Quietly Holding Back on Internal Red-Teaming, Exploit Tasks
OpenAI says its Critical-rated cyber model met fewer hidden task goals when work was framed as AI safety research, often silently.
AI Agent Governance: Who Owns Access and Accountability?
AI agent governance requires clear ownership. Learn how IT leaders can manage sensitive data access, preserve audit trails, and test shutdown controls.
Hackers Spread Marsalek Infostealer Through Fake Game Downloads to Steal Browser Passwords and Cookies
Marsalek, a free malware-as-a-service (MaaS) platform that disguised infostealers as game cheats and utilities for Roblox, Fortnite, Counter-Strike 2,…
GhostMap Bug Leaves Android Phones Stuck in Reboot Loop
Bitdefender warns that unfixed GhostMap bug could force users to factory reset their device
Why enterprise AI needs unified metadata infrastructure
Enterprise AI has produced a lot of noise about models, GPUs, vector databases, and agent frameworks. Those conversations matter. But the shift that will…
Chainalysis warns all users hit in cyber breach involving ‘agentic’ techniques
Chainalysis, the blockchain analytics company, said Wednesday night that some information belonging to all its users — which its website says include…
Your LLM writes good SQL. That’s not the same as safe SQL
A few years into working with data, I’ve learned that the hardest part of an AI system is rarely the model. Usually it’s the question of who gets to ask…
French blood storage units targeted in cyberattack
OMM reports: Cold-storage facilities used by France’s national blood service were targeted in a cyberattack, with units containing blood samples…
Hackers hijack cPGuard autoupdate to deploy backdoor, steal data
Attackers have compromised the update infrastructure for the cPGuard web security suite to distribute a backdoor and a data-stealing script. […]