News

At Infosecurity Europe 2026, Bharat Thakrar of ISACA emphasized the need for executives to view cyber threats as matters of statecraft, not just IT issues. Using examples from the Sony Pictures breach and recent attacks on Viasat and Stryker, he highlighted…

A critical new malware threat has been identified targeting financial software developers through a fake NuGet package named Sicoob.Sdk, which closely imitates legitimate developer tools. Researchers from Socket discovered that the malicious package was…

A dangerous security flaw is actively disrupting enterprise web servers globally. Specifically, attackers are aggressively weaponizing a new

The article discusses a significant increase in AI-powered cybercrime tools available on underground marketplaces, reported by Cynthia Kaiser, a ransomware expert. A comparison of data revealed a spike in mentions of these tools from 38 in December to 1486…

The page discusses a critical cybersecurity alert regarding the 'Gentlemen' ransomware, attributed to the organized group Storm-2697. This ransomware operates as a Ransomware-as-a-Service (RaaS), targeting high-value corporate entities across sectors like…

The article discusses recent cybersecurity threats, specifically focusing on Weedhack attacks targeting Minecraft users and the CountLoader malware impacting a significant number of systems. It highlights the importance of awareness regarding these threats,…

The Kimsuky HttpSpy malware campaign targets South Korean military and corporate entities, employing advanced social engineering tactics and real-time tracking. Threat actors create deceptive websites mimicking legitimate services to distribute malware. They…

Rapid7 disclosed a critical vulnerability (CVE-2026-0826) affecting HP Poly VoIP phones, specifically a stack-based buffer overflow that allows unauthenticated remote code execution (RCE) with root privileges. The flaw arises from improper handling of SDP…

NVIDIA has issued a critical security update for its NVTabular framework, addressing a vulnerability that allows remote attacks through improper data validation. Two high-severity vulnerabilities, CVE-2026-24237 and CVE-2026-24221, both have a CVSS score of…

Microsoft Threat Intelligence reports a significant npm supply chain attack affecting over 90 versions of 32 maliciously modified packages under the @redhat-cloud-services scope. The attackers compromised the CI/CD pipeline of RedHatInsights, allowing…

The article discusses the recent corporate changes surrounding the Windsurf AI coding platform, detailing its acquisition journey that began in 2025. Initially targeted by OpenAI, the company was later acquired by Google for $2.4 billion, which also involved…

The article discusses a critical security threat known as the HTTP/2 Bomb exploit, recently disclosed by the security firm Calif. This exploit targets vulnerabilities in modern web server configurations, enabling attackers to induce denial-of-service…

The JINX-0164 cyber threat focuses on macOS cryptocurrency malware targeting financial software developers through sophisticated social engineering techniques. Attackers leverage fake LinkedIn profiles to build trust with potential victims and arrange fake…

Google is pursuing a strategy to enhance its AI models by acquiring high-quality application code from developers in the Google Play Store. This initiative involves offering financial incentives to creators while ensuring they retain intellectual property…

A critical security vulnerability has been identified in Apache Solr (CVE-2026-44825), affecting core versions 9.4.0 to 9.10.1 and 10.0.0. The vulnerability stems from hardcoded default credentials that can allow remote attackers full administrative access,…

A recent report by security researcher Ammar Askar reveals a critical GitHub token stealing bug in web-based code editors like `github.dev`. This vulnerability arises from how privileged access tokens are managed, allowing attackers to potentially exfiltrate…

The content discusses critical vulnerabilities detected in InHand routers affecting industrial IoT setups, emphasizing command injection flaws in their core operating software. Key security flaws have been confirmed, with a maximum CVSS severity score of…

The Cybersecurity and Infrastructure Security Agency (CISA) has added two new actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. These include: 1. **CVE-2022-0492**: An improper authentication vulnerability in the Linux…

The page features the ISC Stormcast for June 3rd, 2026, with handler Xavier Mertens on duty. The current threat level is indicated as green. Users can find links to discussions, podcasts, and various resources provided by SANS, including information about…

A severe vulnerability (USR-W610) affecting industrial serial-to-ethernet converters has been identified, allowing attackers to remotely compromise critical connectivity devices. This flaw, tracked as CVE-2026-7786, has a CVSS score of 9.8, indicating high…

A critical security vulnerability (CVE-2026-48519) has been detected in the Langflow artificial intelligence orchestration platform, allowing unauthenticated remote users to execute arbitrary code through a flaw in the 'Shareable Playground' feature. This…

A critical Laravel CRLF injection vulnerability has been detected, exposing modern web applications to remote exploitation. This flaw has a high severity CVSS score of 8.9 and affects systems that collect user input, compromising standard contact forms and…

The article discusses an interview with Sandra McLeod, CISO of Zoom, focusing on the role of AI in cybersecurity. McLeod shares insights on navigating cybersecurity careers, emphasizing the importance of diverse backgrounds, networking, and mentorship for…

The article discusses the expansion of Kali365, a phishing-as-a-service platform previously focused on Microsoft 365, which has now broadened its targeting to include AWS, Okta, and various Russian platforms like MAX Messenger. Kali365 employs device code…

The article discusses a large-scale cyberattack operation named DriveSurge, which has hijacked thousands of legitimate websites to redirect users to malware through ClickFix and FakeUpdate attacks. This organized malware delivery system targets both Windows…

President Trump signed an executive order establishing a framework for assessing national security risks associated with advanced AI systems prior to their release, allowing for 30 days of review. AI developers may voluntarily participate. The order aims to…

China is conducting a dual-method cyberattack targeting high-value organizations in the Czech Republic and Taiwan through a sophisticated spear-phishing campaign dubbed 'Operation Dragon Weave.' This campaign utilizes a zip file containing an executable and…

The article discusses the significant risks associated with high-autonomy AI agents in enterprises, highlighting a recent incident where an AI agent caused extensive data loss. Gartner's Dennis Xu emphasizes that while low-autonomy agents are widespread, the…

The Google June 2026 Android update has addressed 124 security flaws, with one vulnerability actively being exploited. The article provides insights into the importance of timely updates in mobile security and highlights various resources, webinars, and…

A new phishing scam is targeting Chrome extension developers through fake copyright removal notices designed to appear legitimate. Developers receive notifications claiming their extension will be removed unless they appeal within 48 hours. These messages…

The article discusses how the Gamaredon group exploits vulnerabilities in WinRAR software to deliver malware, specifically GammaWorm and GammaSteel, targeting Ukraine. It highlights the increasing sophistication of attacks and the need for comprehensive…

The article discusses the recent addition of the Oracle WebLogic vulnerability, identified as CVE-2024-21182, to the Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation. It emphasizes the urgency for users to apply patches…

The Microsoft Build 2026 conference highlights the growing challenges developers and security teams face due to the rapid integration of AI in development processes. The session introduces new security tools to enhance collaboration between developers and…

Two contrasting reports highlight the challenges in cybersecurity amidst the rise of AI-driven attacks. The Cloud Security Alliance (CSA) report indicates that security tools are failing to adequately address vulnerabilities, with 82% of organizations…

Attackers exploited Meta's AI-powered support chatbot to hijack Instagram accounts by resetting passwords without needing access to victims' email inboxes. This issue impacted several accounts, including notable ones like the Obama White House account,…

The National Cyber Security Centre (NCSC) has emphasized the urgent need for organizations to enhance collaboration and cyber resilience amidst a volatile threat landscape. At the Infosecurity Europe event, NCSC Operations Director Paul Chichester outlined…