CrowdStrike has joined the OpenID Foundation and IDPro (Identity Professional Association), strengthening its commitment to identity security standards and industry collaboration. This strategic move positions the cybersecurity giant to influence identity protocols, share threat intelligence, and co
Logitech has launched an $80 foldable Bluetooth mouse targeting mobile professionals who avoid carrying traditional mice. While the device offers portability and convenience, Bluetooth peripherals continue to present security considerations including keystroke injection vulnerabilities, device spoof
The FBI has dismantled multiple fraudulent consulting websites operated by Chinese threat actors specifically designed to target U.S. security clearance holders. These sophisticated honeypot operations posed as legitimate recruitment and consulting firms to identify, profile, and potentially comprom
A China-linked botnet known as JDY has expanded its operational capacity to over 1,500 compromised devices, primarily targeting vulnerable IoT equipment and networking hardware. The botnet’s infrastructure is being leveraged for large-scale cyber reconnaissance activities, credential harvesting, and
OpenAI has disrupted a suspected Chinese influence operation that leveraged ChatGPT to generate content aimed at stirring public debate about data center infrastructure. The campaign, identified as “SweetSpecter,” used AI-generated articles, social media posts, and comments to amplify narratives abo
The complete source code for the notorious Miasma worm was temporarily exposed on GitHub before being taken down. This self-propagating malware, known for its sophisticated evasion techniques and modular architecture, had its operational secrets revealed to the public for several hours. The leak pos
A critical privilege escalation vulnerability (ZDI-26-328) has been discovered in ASUS MyASUS software, allowing local attackers to gain SYSTEM-level privileges through an origin validation error. The flaw affects millions of ASUS device users worldwide who have the pre-installed utility software ru
Google has released DiffusionGemma, an open-source AI image generation model featuring a 4x performance improvement over its predecessor. While the speed enhancement democratizes AI capabilities, it simultaneously amplifies security risks including adversarial attacks, deepfake generation velocity,
The notorious ShinyHunters cybercrime gang has launched targeted attacks against Oracle PeopleSoft servers, compromising enterprise systems and exfiltrating sensitive corporate data. Organizations running vulnerable PeopleSoft installations face immediate risk of data theft, with attackers exploitin
A security researcher publicly disclosed a zero-day vulnerability affecting Windows systems after a dispute with Microsoft over the company’s handling of the flaw. The unpatched vulnerability allows local attackers to escalate privileges, potentially granting SYSTEM-level access. The public release