This past week in cybersecurity wasn’t defined by one massive breach or headline-grabbing attack. Instead, it revealed something more troubling: a steady wave of smaller failures happening all at once. Trusted tools broke down. Old vulnerabilities resurfaced. And attackers moved…
The National Institute of Standards and Technology (NIST) has introduced a new resource aimed at helping organizations safely adopt and manage artificial intelligence. The newly released draft, titled the Cybersecurity Framework Profile for Artificial Intelligence, expands on NIST’s widely used…
Security researchers are warning of active intrusion attempts targeting Fortinet FortiGate devices, following the discovery of malicious single sign-on (SSO) activity linked to recently disclosed vulnerabilities. The activity was first identified last Friday, according to a new report from Arctic…
A wave of coordinated credential-based cyberattacks has been targeting popular remote access technologies, including Palo Alto Networks GlobalProtect and Cisco SSL VPNs. According to recent findings from GreyNoise, the activity intensified in mid-December and appears to be part of a…
Cybersecurity researchers are warning about a sharp rise in attacks using a technique known as device code phishing, a method increasingly favored by both state-sponsored and criminal hacking groups. According to a new report from Proofpoint, multiple threat actors —…
Cybersecurity researchers have uncovered an ongoing campaign in which a China-linked hacking group is exploiting misconfigured Cisco security products to gain unauthorized access to targeted networks. According to Cisco, the attackers are taking advantage of insecure settings within its AsyncOS…
The United States’ growing dependence on open-source software is once again under scrutiny, as concerns rise over the security risks hidden inside widely used digital tools. Lawmakers are now warning that without stronger oversight, the country could be exposing itself…
A serious security flaw has been uncovered in LangChain Core, a widely used framework for building applications powered by large language models (LLMs). The vulnerability could allow attackers to steal sensitive data, manipulate AI responses, and potentially gain deeper system…
Cybersecurity researchers have uncovered a sophisticated cyber-espionage campaign linked to a China-aligned threat group that used DNS poisoning to secretly infect targeted systems with advanced malware. According to security firm Kaspersky, the campaign ran quietly between November 2022 and November…
Trust Wallet Security Incident: What Happened and What Users Should Know Trust Wallet has confirmed a serious security incident involving its Google Chrome browser extension, leading to the loss of approximately $7 million in digital assets. The issue affected users…
