Cloud workloads don’t sit behind your data-center firewall, and attackers know it. A cloud firewall inspects and controls traffic to, from, and between…
Tag: Cyber Security News
Hackers Turned a Trusted Advertising Platform Into a Crypto-Stealer Delivery Network
Adform, a major advertising technology company serving roughly 14,000 businesses and holding nearly 30% of the demand-side platform market, has suffered a…
Arch Linux Disables AUR Package Takeovers as Attackers Push Malicious Commits
Arch Linux has temporarily disabled package adoption on its Arch User Repository (AUR) after security teams detected a wave of malicious takeovers and…
HackerOne Mandates ID Verification for Bug Bounty Submissions
HackerOne has confirmed that all hackers must now complete identity verification before submitting reports to any bug bounty program (BBP) on its…
CyberStrike – AI-Powered Security Platform for Automated Penetration Testing
A new open-source project called CyberStrike is positioning itself as the first AI agent built specifically for offensive security, turning any existing…
Keycloak Vulnerability Exposes User Names and Email Addresses Across Admin Boundaries
Keycloak has addressed a broken access control vulnerability that could allow restricted administrators to access usernames, email addresses, and other…
Your Incident Response Plan Has a Dependency You Never Approved
During the first publicly documented agent-driven intrusion, the defenders tried to analyze the attack with commercial AI models and were refused. The…
Critical SolarWinds Flaw Lets Attackers Bypass Web Help Desk SAML Login
SolarWinds has patched a critical security vulnerability in its Web Help Desk platform that could allow attackers to bypass SAML-based authentication.…
SSH Bot Profiles Linux CPU, GPU and RAM Before Deploying Cryptocurrency Miner
A new SSH bot has been caught quietly logging into Linux systems, profiling their CPU, GPU, and memory, and then walking away without dropping any visible…
DeepSeek-Powered Hermes Agent Launches Autonomous Cyberattacks Against Exposed Servers
A Chinese-speaking threat actor used an AI-driven agent to search for vulnerable internet-facing servers and begin attacks with little direct human input.…
ShutterGap Exposes Millions of AWS Resources Between Cloud Security Scans
Cloud security teams often utilize Cloud Security Posture Management (CSPM) and Cloud-Native Application Protection Platform (CNAPP) tools to identify…
CMMC Phase II Is Paused, But Contractors’ Data-Security Obligations Are Not
By John Grancarich, EVP, Head of Defense & Intelligence, Fortra The recent pause affecting the implementation of Cybersecurity Maturity Model…
FBI And Allies Warn of North Korean IT Workers Using Stolen Identities
The U.S. State Department, FBI, and allied governments including Japan, Canada, Germany, Australia, the United Kingdom, and the Republic of Korea have…
North Korean EtherHiding Campaign Targets Crypto Wallets and Developer Credentials
A North Korean-linked cyber campaign is using fake macOS update screens to trick victims into installing malware. The operation targets cryptocurrency…
Google Uses AI Agents to Find and Fix 1,072 Chrome Security Vulnerabilities
Google is expanding the use of artificial intelligence (AI) agents across the Chrome security lifecycle to identify source code weaknesses, test patches,…
BlackTech APT Deploys BlueShell Linux Backdoor Against Japanese Organizations
BlackTech has been linked to a newly examined Linux backdoor deployment against organizations in Japan, showing how a familiar remote-access tool can be…
Critical JetBrains Flaw Allows Attackers to Execute Malicious Code Remotely – Update Now
JetBrains has announced a critical vulnerability in TeamCity On-Premises, identified as CVE-2026-63077. This vulnerability allows attackers to bypass…
Google Chrome 151 Patches 370 Security Flaws, Including Seven Critical Vulnerabilities
The Stable channel has been updated to Chrome version 151.0.7922.71.72 for Windows and macOS, and 151.0.7922.71 for Linux, with the rollout taking place…
New GenieLocker Ransomware Attacks Windows, ESXi, and Linux Instances
GenieLocker, a newly identified ransomware linked to the financially motivated Toy Ghouls group, targets Windows, Linux, and VMware ESXi systems and has…
Semiconductor Firm Analog Devices Confirms Data Breach After Internal Systems Intrusion
Analog Devices, Inc., a leading U.S. semiconductor manufacturer specializing in analog, mixed-signal, and digital signal processing technology, has…