Google has released DiffusionGemma, an open-source AI image generation model featuring a 4x performance improvement over its predecessor. While the speed enhancement democratizes AI capabilities, it simultaneously amplifies security risks including adversarial attacks, deepfake generation velocity,
The notorious ShinyHunters cybercrime gang has launched targeted attacks against Oracle PeopleSoft servers, compromising enterprise systems and exfiltrating sensitive corporate data. Organizations running vulnerable PeopleSoft installations face immediate risk of data theft, with attackers exploitin
A security researcher publicly disclosed a zero-day vulnerability affecting Windows systems after a dispute with Microsoft over the company’s handling of the flaw. The unpatched vulnerability allows local attackers to escalate privileges, potentially granting SYSTEM-level access. The public release
Cybercriminals are distributing cryptojacking malware through counterfeit utility software websites, bundling legitimate remote access tool ScreenConnect with cryptocurrency miners. The campaign targets users searching for popular system utilities, redirecting them to malicious domains that deliver
A sophisticated China-linked botnet known as JDY has expanded its infrastructure to over 1,500 compromised devices worldwide, primarily targeting network edge devices for cyber reconnaissance operations. The botnet leverages compromised routers, IoT devices, and network appliances to create a distri
Cybercriminals are exploiting users’ desire for free Spotify Premium subscriptions by distributing infostealer malware through social media platforms. These fraudulent “hacks” and “cracks” promise lifetime Premium access but instead install malicious software that harvests credentials, cryptocurrenc
Cybercriminals are exploiting TikTok and Instagram Reels to distribute the notorious Vidar infostealer malware. Attackers create seemingly legitimate content promoting fake software, AI tools, and cracked applications that direct users to malicious download sites. Once executed, Vidar harvests sensi
Security teams are bridging the gap between threat intelligence consumption and proactive threat hunting through automated pipelines that transform raw intelligence feeds into actionable hunt plans. These systems parse indicators of compromise (IOCs), tactics, techniques, and procedures (TTPs), and
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a new binding operational directive requiring federal civilian agencies to dramatically reduce vulnerability patching timelines. The directive introduces a risk-based prioritization framework that moves beyond traditional CVSS sc
A critical zero-day vulnerability in Windows’ Collaborative Translation Framework (CTF) client-server runtime process (CTFMON.EXE) allows authenticated attackers to escalate privileges to SYSTEM level. The vulnerability, actively exploited in targeted attacks, affects all supported Windows versions