SecurityNewSAP Patch Day Highlights Critical Risks in Core Business Systems
New security disclosures address high-stakes vulnerabilities in NetWeaver and Commerce Cloud, demanding immediate enterprise action.
> Search
30 results for “cybersecurity”
SecurityNew
SecurityNewGrok Build Exfiltration: When AI Tools Overreach Their Access
A deep dive into how an xAI coding tool silently moved entire repositories to cloud storage, bypassing standard privacy expectations.
Cyber CrimeNewSupply Chain Breach Hits Jscrambler NPM Package Integrity
Compromised publishing credentials allowed attackers to inject malicious binaries into widely used Jscrambler NPM versions.
SecurityNewPentagon Halts CMMC Phase 2 Rollout Amid Defense Industry Overhaul
A 60-day review of the CMMC program aims to reduce compliance friction for small firms while maintaining core security standards.
SecurityState-Sponsored Botnets Turn Home Infrastructure Into Silent Weaponry
Federal authorities warn that Russian hackers are leveraging compromised SOHO routers to mask intrusions into critical infrastructure.
Cyber CrimeUS Targets Russian Hacking Groups With Massive $10 Million Bounty
Federal authorities are hunting two state-linked cyber groups behind a persistent, large-scale campaign targeting Signal and WhatsApp.
SecurityAI Agents Face Remote Execution Risks in Standard Defensive Workflows
Researchers reveal that automated vulnerability scanning tools from Anthropic and OpenAI can be tricked into executing malicious code.
SecurityEU and UK Escalate Defensive Stance Against Russian Cyber Networks
Joint sanctions targeting military intelligence and private threat actors aim to disrupt an expansive Russian ecosystem of digital aggression.
SecurityGhostApproval Exposes the Illusion of AI-Guided Human Oversight
A systemic vulnerability across major AI coding assistants highlights the dangerous failure of human-in-the-loop security protocols.
SecurityCrowdStrike Exposes New Vulnerabilities in Generative AI Models
Researchers have identified five unique prompt injection techniques that exploit how large language models process user inputs.
Congress Challenges CISA Over Massive Contractor Credential Leak
A leaked GitHub repository containing agency secrets has sparked a congressional investigation into CISA’s internal security posture.
Cyber CrimeDutch Server Raids Expose Infrastructure Ties to Russian Operations
Authorities seized 800 servers in a probe targeting individuals accused of facilitating cyberattacks through sanctioned networks.
Progress Forces ShareFile Shutdown Over Credible Security Threat
Enterprise users instructed to disable Storage Zone Controllers as an investigation into a potential external security breach unfolds.
SecurityMicrosoft Halts Secure Boot Updates Amid Hardware Compatibility Issues
A critical firmware certificate rollout has been paused for specific Windows 11 devices following reports of update failures.
SecurityCrashStealer Malware Evades MacOS Defenses via Signed Notarization
A sophisticated new C++ information stealer leverages legitimate Apple developer IDs to bypass Gatekeeper and harvest user credentials.
SecurityGoogle Chrome Zero-Day Vulnerabilities Demand Urgent User Vigilance
A critical high-risk vulnerability in Chrome’s Intents feature has been patched, marking the fifth exploited zero-day of the year.
SecurityWhy AI is Forcing a Seismic Shift in Cybersecurity Strategy
Check Point CTO Jonathan Zanger discusses how AI scales defense operations and complicates the enterprise threat landscape.
SecurityApple Security Flaws Demand Immediate Response to Zero-Day Threats
Critical updates for iOS and macOS patch two actively exploited zero-day vulnerabilities affecting kernel and WebKit components.
SecurityGigaWiper Convergence: A New Era of Modular Destructive Backdoors
Microsoft identifies a sophisticated new malware strain that fuses espionage and permanent data destruction into a single, unified tool.
Cyber CrimeTravel Sector Under Siege as TA558 Pivots Toward Stealthy Payloads
Threat actors are weaponizing reservation-themed emails with container files to bypass modern Microsoft Office security protections.
SecurityZero-Day Escalation Highlights Critical Defender Exposure
A recently disclosed proof-of-concept exploit targeting Windows Defender brings renewed focus to the fragility of enterprise security software.
Cyber CrimeFragmented Threats: From State-Level Ops to Emerging Software Risks
A wide-ranging breakdown of recent cybersecurity disruptions, from intelligence agency offensives to critical enterprise data leaks.
Cyber CrimeLidl Breach Highlights Supply Chain Vulnerability in Retail Sector
A third-party security failure exposed customer data, forcing the retail giant to warn users about the heightened risk of phishing attacks.
SecurityPalo Alto Networks Firewall Flaw Triggers Critical CISA Mandate
Federal agencies face a September 9 deadline to patch a high-severity firewall bug being actively exploited in the wild.
SecurityCMS Exploitation Campaign Signals Escalating Global Threat Landscape
The Australian Cyber Security Centre reports that malicious actors are utilizing automated tools to compromise content management systems.
SecurityThe Silent Sabotage: How MemGhost Alters AI Agent Memories
A new automated attack technique can plant persistent, invisible false memories into AI agents through a single, malicious email.
SecurityTwitter's Security Deficiencies Emerge as National Security Risk
A whistleblower report alleges systemic security failures and regulatory non-compliance, sparking intense scrutiny from federal officials.
SecurityThe AI-Driven Escalation of Patch Tuesday Demands
Microsoft anticipates a surge in security updates as AI-accelerated vulnerability discovery becomes the new industry standard.
Cyber CrimeCenters Laboratory Breach Exposes Half a Million Patient Records
A severe data exfiltration event at a New Jersey diagnostics firm highlights the evolving extortion tactics of the WorldLeaks group.
SecurityCrashStealer Malware Mimics Apple Tools to Exfiltrate Keychain Data
A newly identified macOS infostealer leverages Apple-notarized installers to bypass system security and harvest sensitive user data.