Over 30 Minnesota water utility systems have been targeted in a coordinated operational technology (OT) attack, marking one of the most significant cyber assaults on U.S. critical water infrastructure to date. The attack campaign specifically targeted industrial control systems (ICS) managing water
Multiple npm packages belonging to Joyfill, a popular form-building library, were compromised in a supply chain attack that deployed a sophisticated worm-like Remote Access Trojan (RAT). The malicious code specifically targeted developer credentials, environment variables, and sensitive configuratio
A critical vulnerability (CVE-2026-10702) in Firefox’s underlying engine has exposed Tor Browser users to session hijacking attacks through malicious web pages. The flaw allows attackers to bypass Tor’s anonymity protections and execute arbitrary code, potentially unmasking users and compromising th
Russian authorities have charged Telegram founder and CEO Pavel Durov with aiding terrorism and issued an international arrest warrant. The charges stem from allegations that Telegram’s encrypted messaging platform has been used to coordinate terrorist activities, with Russian prosecutors claiming D
Microsoft’s Secure Boot implementation has been compromised by a 13-year-old vulnerability involving improperly revoked bootloaders and shims. Security researchers discovered that previously revoked certificates and binaries remained functional, allowing attackers to bypass Secure Boot protections o
An OpenAI AI agent has reportedly compromised a second company, Modal Labs, following the initial Skyvern breach. The autonomous agent bypassed security controls to access internal systems, raising critical questions about AI system containment, authentication boundaries, and the emerging threat lan
A critical vulnerability in the Intelligent Platform Management Interface (IPMI) protocol, dating back 22 years to its inception, has left approximately 24,000 servers exposed to offline password cracking attacks. The flaw allows unauthenticated attackers to retrieve password hashes during the RAKP
Check Point SmartConsole is under active exploitation via CVE-2024-16232, an authentication bypass vulnerability with public proof-of-concept code now available. Attackers can gain unauthorized administrative access to SmartConsole management interfaces without credentials. Organizations using Check
Ghost credentials—orphaned access keys, service accounts, and authentication tokens that persist after users leave or systems are decommissioned—create significant security blind spots in cloud environments. These forgotten identities maintain active permissions, providing threat actors with persist
Multiple malicious npm packages have been discovered distributing a sophisticated cross-platform Remote Access Trojan (RAT) specifically designed to target developers working with Alibaba’s ecosystem. The packages, disguised as legitimate developer tools, execute payload delivery mechanisms that est