Microsoft has issued a public apology and reversed its stance following a heated dispute with a security researcher who disclosed a zero-day vulnerability. The tech giant initially threatened the researcher with legal action and refused a CVE assignment, sparking widespread criticism from the cybers
Microsoft has reversed its stance following a public confrontation with a security researcher over a zero-day vulnerability disclosure. The tech giant initially disputed the researcher’s findings and delayed patching, but mounting pressure from the security community forced a policy reassessment. Th
Cybercriminals have developed sophisticated WordPress malware that conceals command-and-control (C2) communications within Steam gaming platform profile comments. This novel obfuscation technique exploits Steam’s legitimate infrastructure to evade detection by security tools, allowing attackers to m
AI-powered exploitation tools are fundamentally changing vulnerability management by reducing the time between disclosure and active exploitation from weeks to hours. Attackers now leverage large language models and automated reconnaissance systems to generate working exploits faster than organizati
Anthropic’s AI assistant Claude experienced a significant service outage coinciding with the company’s highly anticipated stock market debut. The disruption affected thousands of users globally, preventing access to Claude’s web interface, API services, and mobile applications for several hours. Whi
Traditional cryptographic defenses are facing unprecedented challenges from artificial intelligence and machine learning technologies. AI-powered attacks can analyze encrypted traffic patterns, exploit implementation flaws faster than human defenders, and systematically discover cryptographic weakne
Scammers are exploiting caller ID spoofing technology to impersonate the Police Service of Northern Ireland (PSNI), displaying legitimate police phone numbers to trick victims into purchasing gift cards. The PSNI has issued a public service announcement warning residents that officers will never req
A critical command injection vulnerability has been discovered in multiple TP-Link router models, allowing unauthenticated attackers to execute arbitrary system commands remotely. The flaw, affecting widely deployed consumer and small business routers, stems from improper input validation in the web
PHANTOMPULSE, a newly discovered Remote Access Trojan (RAT), is actively compromising Windows systems through sophisticated process injection techniques and User Account Control (UAC) bypass methods. The malware employs multi-stage injection, reflective DLL loading, and legitimate process hollowing
The Pakistan-linked APT group SideCopy has launched a targeted cyber espionage operation against Afghanistan’s Ministry of Finance using Xeno RAT, an open-source remote access trojan. The attack leverages weaponized documents and multi-stage infection chains to establish persistent access for intell