Latest News

Vulnerabilities

CVE Exposure: 345 Days of Untested Risk

A single VPN vulnerability led to data breaches at over 70 financial institutions, highlighting the risks of untested exposure in the banking sector.

Malware

Atlas RAT Malware Used in European Cyberattacks

A Chinese-speaking cybercrime group, TA4922, has deployed the previously undocumented Atlas RAT malware in European cyberattacks, targeting entities in Germany, Italy, the UK, and South Africa.

Vulnerabilities

HTTP/2 Bomb DoS Attack

A new DoS attack, dubbed HTTP/2 Bomb, can crash web servers in under a minute by exploiting default HTTP/2 configurations, affecting major web servers like NGINX, Apache, and Microsoft IIS.

Threats

Android Protection Against AI Deepfake Scam Calls

Google introduces a new Android security feature to detect and flag phone calls where scammers use AI to impersonate personal contacts, rolling out to Android 12 and later devices.

Threats

Rise of Zero-Knowledge Threat Actors

The rise of AI in cybersecurity has led to the emergence of zero-knowledge threat actors, who can leverage AI to generate malicious code and exploit vulnerabilities despite having negligible technical expertise.

Vulnerabilities

Exchange Online Outage Causes Email Delays

Microsoft Exchange Online users are experiencing significant delays or failures in sending and receiving emails due to a widespread service issue.

Analysis

White House Unveils AI Executive Order

The White House has released a pared-back AI executive order, establishing a voluntary review period for government testing of AI models within 30 days of release to the public.

Vulnerabilities

Red Hat Removes Tainted Packages After Supply Chain Compromise

Red Hat removed dozens of packages from its software distribution pipeline after attackers used a compromised GitHub account to distribute credential-stealing malware to developers, affecting 32 packages downloaded roughly 117,000 times a week.

Threats

Meta AI Abused to Hijack Instagram Accounts

Multiple Instagram users had their accounts hijacked after attackers convinced Meta's AI-powered support tools that they were the legitimate owners, with many unable to recover access due to automated assistance loops.

← Prev 1 … 6263646566 … 111 Next →