Gamaredon Uses GammaDrop and GammaLoad Downloaders in Multi-Stage Phishing Attacks. A sustained cyber-espionage campaign linked to the Gamaredon threat group is actively targeting Ukrainian government entities using multi-stage phishing attacks and evolving malware loaders. Gamaredon, also known as UAC-0010 or…
Category: EN
Dify: When Your AI Platform Becomes the Attack Surface
Executive Summary We identified a couple of vulnerabilities in AI automation platform Dify resulting in cross-tenant sensitive information disclosure and one-click account takeover. These findings reinforce the pattern we documented in our previous n8n blogpost: even though AI automation platforms are increasingly becoming integration hubs for complex workflows, their security posture still lags behind their rapid evolution and operational importance. Introduction Dify is an open-source platform for building LLM-powered applications: agents,…
Millions Impacted Across Several US Healthcare Data Breaches
Several healthcare data breaches impacting hundreds of thousands and even millions were added to the HHS tracker. The post Millions Impacted Across Several US Healthcare Data Breaches appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the…
SmartBear expands ReadyAPI with AI-powered API testing capabilities
SmartBear has announced ReadyAPI’s new AI test generation capability that accelerates API testing by up to 80% while giving teams control to enable or disable AI. While competitors focus on speed alone, ReadyAPI’s AI test generation capability is architected for…
Windows 11 Update Failure Error 0x800f0922
Microsoft has officially acknowledged a widespread installation failure affecting the May 2026 cumulative update for Windows 11. This article has been indexed from CyberMaterial Read the original article: Windows 11 Update Failure Error 0x800f0922
Massive student data breach at universities
Multiple universities have suffered a major data breach that exposed student information, according to cybersecurity firm Proofpoint. This article has been indexed from CyberMaterial Read the original article: Massive student data breach at universities
AI Agents for Web Testing & Security Validation
A new AI-driven testing framework addresses a persistent problem in software development: web test suites that break and get abandoned after UI changes or timing updates. This article has been indexed from CyberMaterial Read the original article: AI Agents for…
INTERPOL Operation Ramz: 201 arrested in MENA cybercrime
INTERPOL has announced the results of Operation Ramz, a coordinated law enforcement action across the Middle East and North Africa (MENA) region that targeted widespread phishing campaigns, malware operations, and cyber fraud schemes. This article has been indexed from CyberMaterial…
Philippine Gov’t IOs Receive Cybersecurity Training
Government information officers across the Philippines’ Western Visayas region participated in specialized cybersecurity training at Iloilo Science and Technology University on April 29, 2025. This article has been indexed from CyberMaterial Read the original article: Philippine Gov’t IOs Receive Cybersecurity…
One in 33 Employees Is Driving Nearly a Fifth of All Workplace AI Activity and Most Companies Are Only Just Waking Up to It
New behavioural data from Redflags has revealed a striking concentration of AI tool usage within UK organisations: just 3% of employees account for 18% of all AI-related activity on work devices, averaging 235 AI events each, compared with 35 for…
Poland directs officials to ditch Signal in favor of ‘secure’ state-developed alternative
Shift comes amid mounting reports of successful social engineering attacks targeting higher-ups in government This article has been indexed from www.theregister.com – Articles Read the original article: Poland directs officials to ditch Signal in favor of ‘secure’ state-developed alternative
‘Claw Chain’ OpenClaw Flaws Allow Sandbox Escape, Backdoor Delivery
Four vulnerabilities in OpenClaw can be chained together to steal credentials, escape the sandbox, and plant persistent backdoors. The post ‘Claw Chain’ OpenClaw Flaws Allow Sandbox Escape, Backdoor Delivery appeared first on SecurityWeek. This article has been indexed from SecurityWeek…
NCSC Releases Agentic AI Security Guidance
The UK’s National Cyber Security Centre (NCSC) has released new security guidance for organizations deploying agentic AI systems, highlighting the unique cyber risks posed by autonomous artificial intelligence agents. This article has been indexed from CyberMaterial Read the original article:…
Pwn2Own Berlin 2026: 47 zero-days, $1.3M rewards
The Pwn2Own Berlin 2026 hacking competition concluded with security researchers successfully exploiting 47 zero-day vulnerabilities across multiple products, earning collective rewards totaling $1,298,250. This article has been indexed from CyberMaterial Read the original article: Pwn2Own Berlin 2026: 47 zero-days, $1.3M…
Gremlin Stealer Hides Payloads in .NET Resources to Evade Detection
A newly discovered variant of the Gremlin Stealer is raising concerns among security researchers by adopting stealth-focused techniques that significantly reduce its detection footprint. Gremlin Stealer is an information-stealing malware actively sold on Telegram. It targets a wide range of…
IT threat evolution in Q1 2026. Non-mobile statistics
The report presents key trends and statistics on malware that targeted personal computers running Windows and macOS, as well as Internet of Things (IoT) devices, during Q1 2026. This article has been indexed from Securelist Read the original article: IT…
IT threat evolution in Q1 2026. Mobile statistics
This report contains mobile threat statistics for Q1 2026, along with noteworthy discoveries and quarterly trends: new versions of SparkCat and Triada. This article has been indexed from Securelist Read the original article: IT threat evolution in Q1 2026. Mobile…
Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation Flaws
Ivanti, Fortinet, n8n, SAP, and VMware have released security fixes for various vulnerabilities that could be exploited by bad actors to bypass authentication and execute arbitrary code. Topping the list is a critical flaw impacting Ivanti Xtraction (CVE-2026-8043, CVSS score:…
Developer Workstations Are Now Part of the Software Supply Chain
Supply chain attackers are not only trying to slip malicious code into trusted software. They are trying to steal the access that makes trusted software possible. Recently, three separate campaigns hit npm, PyPI, and Docker Hub in a 48-hour window,…
Paper Werewolf APT Spreads EchoGather RAT
A sophisticated threat actor known as Paper Werewolf has launched targeted cyberattacks against Russian organizations across industrial, financial, and transport sectors during a two-month campaign spanning March and April 2026. This article has been indexed from CyberMaterial Read the original…