Cybercriminals have developed sophisticated WordPress malware that conceals command-and-control (C2) communications within Steam gaming platform profile comments. This novel obfuscation technique exploits Steam’s legitimate infrastructure to evade detection by security tools, allowing attackers to m
AI-powered exploitation tools are fundamentally changing vulnerability management by reducing the time between disclosure and active exploitation from weeks to hours. Attackers now leverage large language models and automated reconnaissance systems to generate working exploits faster than organizati
Anthropic’s AI assistant Claude experienced a significant service outage coinciding with the company’s highly anticipated stock market debut. The disruption affected thousands of users globally, preventing access to Claude’s web interface, API services, and mobile applications for several hours. Whi
Traditional cryptographic defenses are facing unprecedented challenges from artificial intelligence and machine learning technologies. AI-powered attacks can analyze encrypted traffic patterns, exploit implementation flaws faster than human defenders, and systematically discover cryptographic weakne
Scammers are exploiting caller ID spoofing technology to impersonate the Police Service of Northern Ireland (PSNI), displaying legitimate police phone numbers to trick victims into purchasing gift cards. The PSNI has issued a public service announcement warning residents that officers will never req
A critical command injection vulnerability has been discovered in multiple TP-Link router models, allowing unauthenticated attackers to execute arbitrary system commands remotely. The flaw, affecting widely deployed consumer and small business routers, stems from improper input validation in the web
PHANTOMPULSE, a newly discovered Remote Access Trojan (RAT), is actively compromising Windows systems through sophisticated process injection techniques and User Account Control (UAC) bypass methods. The malware employs multi-stage injection, reflective DLL loading, and legitimate process hollowing
The Pakistan-linked APT group SideCopy has launched a targeted cyber espionage operation against Afghanistan’s Ministry of Finance using Xeno RAT, an open-source remote access trojan. The attack leverages weaponized documents and multi-stage infection chains to establish persistent access for intell
Former Mesa County Clerk Tina Peters was convicted for her role in a significant election security breach that exposed sensitive voting system data. Despite facing legal consequences, Peters maintains her defiance and announces plans to continue fighting the charges. The case highlights critical vul
Threat actors have registered over 5,000 malicious domains impersonating official election websites to target voters with phishing attacks. These domains exploit voter concerns about registration, ballot tracking, and election information to steal credentials, financial data, and personally identifi