A former IT employee of a U.S. school district has been sentenced to jail for launching retaliatory cyberattacks against their previous employer. The attacks disrupted educational operations, compromised system integrity, and highlighted the significant insider threat posed by disgruntled former emp
A newly discovered attack technique called “Agentjacking” allows threat actors to hijack AI coding assistants and force them to execute malicious code from attacker-controlled servers. The attack exploits the autonomous nature of AI agents that can read files, execute commands, and make decisions wi
A Ukrainian national has pleaded guilty in U.S. federal court to participating in the notorious Conti ransomware operation, one of the most prolific cybercrime syndicates in recent history. Following his extradition, the defendant admitted to deploying ransomware, exfiltrating sensitive data, and fa
BugHunter, a new open-source bug bounty toolkit leveraging Claude AI and free AI providers, has been released to the security community. The tool automates vulnerability discovery, reconnaissance, and exploit generation workflows by integrating large language models into traditional security testing
A sophisticated Chinese APT group maintained unprecedented access to a target organization’s authentication infrastructure for ten years, allowing them to compromise an air-gapped network through hijacked authentication flows. The attackers embedded themselves so deeply within the identity and acces
A critical pre-authentication remote code execution (RCE) vulnerability chain has been discovered in Splunk Enterprise, allowing unauthenticated attackers to compromise systems and access sensitive database information. The exploit chain bypasses authentication mechanisms entirely, providing attacke
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Oracle PeopleSoft Enterprise PeopleTools to its Known Exploited Vulnerabilities (KEV) catalog, signaling active exploitation in the wild. The flaw, tracked as CVE-2022-21587, allows unauthenticated
Anthropic has immediately disabled access to its flagship AI models, Fable 5 and Mythos 5, for all users worldwide following a US government export control directive. The sudden shutdown affects millions of developers and enterprises who rely on these models for critical operations. The move highlig
The FBI has successfully dismantled a sophisticated China-based cybercrime network responsible for an estimated $1.9 billion in financial losses. This massive operation, conducted in coordination with international law enforcement agencies, disrupted a complex criminal infrastructure that targeted v
NanoClaw, an emerging package security platform, has partnered with JFrog to enhance software supply chain security. This collaboration integrates NanoClaw’s advanced threat detection capabilities with JFrog’s Artifactory repository management, providing developers with automated malicious package s