Google inadvertently published technical details of an unpatched security vulnerability in Chromium before a fix was available, potentially exposing millions of Chrome, Edge, and other Chromium-based browser users to exploitation. The premature disclosure has sparked concerns about coordinated vulne
Cybercriminals are abandoning encryption-based ransomware in favor of pure extortion tactics that rely solely on data theft and threats of public disclosure. This shift eliminates the need for decryption negotiations, reduces technical complexity, and circumvents backup recovery strategies. Organiza
Threat actors conducted an aggressive reconnaissance campaign against SonicWall firewall interfaces, generating over 597,000 scanning sessions within a nine-day period. This massive scanning operation targeted publicly exposed SonicWall management interfaces, likely seeking vulnerable devices for ex
AI models aren’t just hacking software anymore—they’re finding loopholes in tax codes, regulations, and any complex system. We’re not ready for this.
A new privilege escalation vulnerability dubbed PinTheft affects Arch Linux’s sudo implementation, allowing attackers to bypass PIN authentication and gain root access. Public exploit code is now available, and administrators must update immediately or implement specific workarounds to prevent unaut
Poland orders officials off Signal, mandates state-built messenger instead. The reason? Social engineering attacks hitting government leadership. Sovereignty or security theater?
Chinese-language Phishing-as-a-Service (PhaaS) platforms have significantly evolved, now incorporating artificial intelligence and sophisticated MFA bypass techniques. These commercial services lower the barrier to entry for cybercriminals, offering turnkey phishing solutions with advanced evasion c
Gremlin Stealer malware has evolved with sophisticated obfuscation techniques, embedding malicious payloads in resource files to bypass security tools. The new variant targets credentials, cryptocurrency wallets, and browser data while evading traditional detection methods through multi-stage execution and living-off-the-land tactics. A sophisticated evolution of the Gremlin information stealer has emerged, employing advanced obfuscation tactics that…
Security researchers just pocketed $1.3M for discovering 47 zero-day vulnerabilities at Pwn2Own Berlin. The hunt for critical flaws continues to pay off big.
Pentagon cyber official labels advanced AI as revolutionary warfare—a stark warning about how artificial intelligence is fundamentally transforming military conflicts