IBM has unveiled groundbreaking sub-1 nanometer chip technology, representing a significant leap in semiconductor miniaturization. While this advancement promises unprecedented computational power and efficiency, it introduces novel security challenges including increased vulnerability to side-chann
Grafana Labs confirms source code stolen after attackers compromised GitHub environment with stolen access token. Another reminder that token security is critical.
Chinese AI company Zhipu AI has released GLM-5.2, claiming performance comparable to Anthropic’s Claude in identifying security vulnerabilities. This development signals a significant shift in the AI-powered security landscape, as state-backed Chinese models potentially match Western capabilities in
Logitech has launched an $80 foldable Bluetooth mouse targeting mobile professionals who avoid carrying traditional mice. While the device offers portability and convenience, Bluetooth peripherals continue to present security considerations including keystroke injection vulnerabilities, device spoof
OpenAI confirms employee devices compromised in TanStack supply chain attack. Code-signing certificates rotated after breach affected hundreds of npm and PyPI packages.
ServiceNow, a leading enterprise cloud platform serving over 7,700 organizations globally, disclosed a security incident that resulted in unauthorized access to customer data. The breach stemmed from a misconfigured customer instance that allowed an unauthorized party to access sensitive information
A critical zero-day vulnerability in Metabase, an open-source business intelligence platform, is being actively exploited in the wild. The flaw, assigned a maximum CVSS score of 10.0, allows unauthenticated attackers to gain administrative access and extract sensitive data from affected instances. O
OPENAI EMPLOYEE DEVICES COMPROMISED IN ATTACK Malware-laden npm packages infected two OpenAI staff machines, stealing internal credentials. Supply chain attacks continue to threaten even the most security-conscious organizations. Audit all npm dependencies and rotate credentials immediately. Severity: High Target: JavaScript developers and enterprises
The Mistic backdoor has emerged as a sophisticated threat linked to the KongTuke threat actor, targeting multiple industry sectors through ClickFix social engineering techniques and ModeloRAT campaigns. This multi-stage attack employs PowerShell obfuscation, fileless execution, and advanced evasion
Mackay Sugar, one of Australia’s largest sugar producers, has publicly disclosed a cyberattack that disrupted its operations. The company confirmed unauthorized access to its IT systems and has engaged cybersecurity experts while working with law enforcement. The incident highlights the ongoing thre