The OceanLotus APT group (APT32) has launched a sophisticated cyber-espionage campaign dubbed “FireAnt” targeting Vietnamese investors and financial sector entities. The operation leverages a newly identified backdoor malware called SPECTRALVIPER, delivered through weaponized documents disguised as
Security researchers have disclosed a sophisticated zero-click exploit chain targeting Google’s Pixel 10 devices that achieves full root access without any user interaction. The attack leverages vulnerabilities in the device’s messaging subsystem and kernel, allowing remote attackers to compromise d
The Langflow AI development platform is under active attack due to a critical path traversal vulnerability (CVE-2024-52304) that allows unauthenticated attackers to read arbitrary files from affected systems. Tracked with a CVSS score of 7.5, this flaw enables threat actors to exfiltrate sensitive c
CrowdStrike has joined the OpenID Foundation and IDPro (Identity Professional Association), strengthening its commitment to identity security standards and industry collaboration. This strategic move positions the cybersecurity giant to influence identity protocols, share threat intelligence, and co
The FBI has dismantled multiple fraudulent consulting websites operated by Chinese threat actors specifically designed to target U.S. security clearance holders. These sophisticated honeypot operations posed as legitimate recruitment and consulting firms to identify, profile, and potentially comprom
A China-linked botnet known as JDY has expanded its operational capacity to over 1,500 compromised devices, primarily targeting vulnerable IoT equipment and networking hardware. The botnet’s infrastructure is being leveraged for large-scale cyber reconnaissance activities, credential harvesting, and
OpenAI has disrupted a suspected Chinese influence operation that leveraged ChatGPT to generate content aimed at stirring public debate about data center infrastructure. The campaign, identified as “SweetSpecter,” used AI-generated articles, social media posts, and comments to amplify narratives abo
The complete source code for the notorious Miasma worm was temporarily exposed on GitHub before being taken down. This self-propagating malware, known for its sophisticated evasion techniques and modular architecture, had its operational secrets revealed to the public for several hours. The leak pos
A critical privilege escalation vulnerability (ZDI-26-328) has been discovered in ASUS MyASUS software, allowing local attackers to gain SYSTEM-level privileges through an origin validation error. The flaw affects millions of ASUS device users worldwide who have the pre-installed utility software ru
Google has released DiffusionGemma, an open-source AI image generation model featuring a 4x performance improvement over its predecessor. While the speed enhancement democratizes AI capabilities, it simultaneously amplifies security risks including adversarial attacks, deepfake generation velocity,