Michigan lawmakers are advocating for a complete ban on Chinese-manufactured and Chinese-branded vehicles from entering U.S. borders, citing national security risks related to surveillance capabilities, data collection, and potential remote control features. The proposed measures go beyond existing
Security researchers have uncovered four critical vulnerabilities in the Dify AI platform that collectively affect over 1 million AI applications. Dubbed “DifyTap,” these bugs enable attackers to execute arbitrary code, steal sensitive data, hijack administrative accounts, and compromise entire AI w
Cisco SD-WAN infrastructure is under active attack from a critical zero-day vulnerability that grants attackers root-level access to vulnerable systems. The flaw, affecting multiple SD-WAN components, is being actively exploited in the wild before patches are available. Organizations running Cisco S
A massive malware distribution campaign dubbed “FakeGit” has weaponized approximately 7,600 GitHub repositories to deliver SmartLoader malware. Attackers are exploiting GitHub’s trusted reputation by creating fake repositories that masquerade as legitimate software projects, tricking developers and
The U.S. government has mandated Anthropic to immediately suspend access to its advanced AI models, Fable 5 and Mythos 5, for foreign nationals. This unprecedented move highlights escalating concerns about AI capabilities being weaponized for cyber operations, disinformation campaigns, and potential
A critical integer overflow vulnerability (ZDI-26-332) in QEMU’s `calc_image_hostmem` function allows authenticated local attackers to escalate privileges on affected systems. The flaw stems from improper integer validation when calculating image host memory, potentially enabling attackers to break
A sophisticated email compromise targeting a stock exchange executive’s Microsoft Outlook account remained undetected for five months, with attackers establishing persistent access to exfiltrate credentials and sensitive communications. The breach leveraged compromised credentials and stealthy inbox
Critical Funnel Builder plugin flaw actively exploited to inject card-stealing malware into WordPress checkout pages. 400K+ sites at risk. Patch immediately.
The Five Eyes intelligence alliance has issued a joint advisory warning that Chinese state-sponsored threat actors are conducting sophisticated social engineering campaigns using fake job advertisements to target military personnel and defense contractors. These operations aim to extract classified
The White House has significantly accelerated the timeline for federal agencies to migrate away from quantum-vulnerable cryptographic systems, moving the deadline forward by several years. This urgent directive recognizes the imminent threat posed by quantum computing to current encryption standards