AI Model Discovers Critical macOS Security Flaws
AI-powered security research just exposed critical macOS flaws. Anthropic’s Mythos model helped discover vulnerabilities that bypass Apple’s memory protection.
Read More
Who Runs The Gentlemen Ransomware Gang?
The Gentlemen ransomware gang emerged in 2024 as a sophisticated threat actor targeting healthcare, manufacturing, and critical infrastructure. Despite their polished communication style and claims of ethical boundaries, the group has successfully breached over 30 organizations globally. This invest
CitrixBleed CVE-2026-8451 Under Active Exploitation 24 Hours Post-Disclosure
The CitrixBleed vulnerability (CVE-2023-4966) affecting Citrix NetScaler ADC and Gateway appliances has been actively exploited within 24 hours of public disclosure. This critical session hijacking flaw allows unauthenticated attackers to steal valid session tokens and bypass multifactor authenticat
Scammers Weaponize TikTok To Spread Vidar Malware
Cybercriminals are exploiting TikTok and Instagram Reels to distribute the notorious Vidar infostealer malware. Attackers create seemingly legitimate content promoting fake software, AI tools, and cracked applications that direct users to malicious download sites. Once executed, Vidar harvests sensi
Analog Devices Data Breach: Unauthorized System Access Confirmed
Analog Devices, Inc. (ADI), a leading semiconductor manufacturer with over $12 billion in annual revenue, has disclosed a data breach following unauthorized access to its corporate systems. The company confirmed that threat actors infiltrated its network and exfiltrated sensitive data, though the fu
Oracle PeopleSoft Servers Hit By ShinyHunters Gang
The notorious ShinyHunters cybercrime gang has launched targeted attacks against Oracle PeopleSoft servers, compromising enterprise systems and exfiltrating sensitive corporate data. Organizations running vulnerable PeopleSoft installations face immediate risk of data theft, with attackers exploitin
BAE Systems Cyber Incident Disables US Bankruptcy Notices for Week
BAE Systems cyber incident disabled the Bankruptcy Noticing Center for seven days starting October 9, preventing all US federal bankruptcy courts from sending required legal notices. The outage demonstrates critical vulnerabilities in third-party government services.
GitHub Actions Workflow Compromised In Supply Chain Attack
GitHub Actions supply chain attack hits actions-cool/issues-helper. Attackers redirected ALL repository tags to malicious commits, stealing CI/CD credentials.
Malicious npm Packages Deliver Windows RAT via PostCSS Masquerade
Cybercriminals have published multiple malicious npm packages impersonating the legitimate PostCSS ecosystem to distribute a Windows Remote Access Trojan (RAT). The packages use typosquatting and dependency confusion techniques to trick developers into downloading malware that establishes persistent
CISA Adds Android And Linux Flaws To KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added multiple Android and Linux Kernel vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, signaling active exploitation in the wild. Federal agencies must patch these flaws by the mandated deadline, while privat