Cybersecurity · page 2

Anthropic launched OSS Scanner on Thursday, a new artificial intelligence (AI)-powered tool designed to enhance the security of the open-source software ecosystem. This service operates on an opt-in basis and leverages Anthropic's advanced AI models, specifically drawing from their experience…

Threat actors are actively exploiting two recently disclosed vulnerabilities within the AhsayCBS backup utility, a software solution designed for enterprise data protection and disaster recovery. These exploits allow attackers to gain unauthorized control over affected devices, subsequently deploying malicious web…

Attackers are actively exploiting a maximum-severity vulnerability, identified as CVE-2026-102255, in SonicWall SMA1000 appliances. This exploitation is occurring despite the release of a patch for the vulnerability just three days prior to the current reporting.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing their exploitation by a China-linked threat actor identified as Flax Typhoon.

Zcash developers have set a target of January for the implementation of quantum-resistant payment features, a move accelerated by a recent security incident dubbed 'bunker mode.' This initiative aims to safeguard the privacy-focused cryptocurrency against potential threats from future quantum…

A Ukrainian-Russian dual citizen has pleaded guilty to orchestrating a sprawling money laundering network that facilitated millions of dollars in illicit transactions for cybercriminals across the globe. The individual admitted to managing a vast operation involving approximately 15,000 individuals…

Microsoft announced that devices running unsupported versions of Windows will no longer receive security updates after a planned Windows Update certificate rotation scheduled for next year, 2024. This policy change signifies a critical shift in the company's security support…

A significant security vulnerability has been identified in GoBalance, a tool frequently employed by dark web sites to maintain accessibility during distributed denial-of-service (DDoS) attacks. This flaw, disclosed by Searchlight Cyber on October 8, enables malicious actors to compromise…

Citrix has issued a critical alert to IT administrators, urging them to immediately patch systems affected by a newly discovered vulnerability in its NetScaler Application Delivery Controller (ADC) networking appliances and NetScaler Gateway secure remote access solutions.

Three independent research teams successfully executed remote hacking demonstrations against fully patched Google Pixel 10 devices on October 8, 2024, during the Pwn2Own Ireland hacking contest held in Cork. The Pwn2Own contest mandates that all target devices must be running…

Citrix has issued critical security patches for its NetScaler ADC (Application Delivery Controller) and NetScaler Gateway products, addressing a significant vulnerability identified as CVE-2026-107406. This flaw, characterized as a memory overflow issue, carries the potential to enable remote code execution…

The Pwn2Own Ireland 2026 hacking competition concluded this week, with cybersecurity researchers earning a total of $1,262,000 by successfully exploiting 98 previously unknown vulnerabilities, referred to as zero-days. These exploits targeted a range of software and hardware products, demonstrating significant…

Anthropic launched OSS Scanner on May 15, 2024, a new service designed to identify security vulnerabilities within open-source projects. This initiative aims to bolster the security posture of the open-source ecosystem by offering…

The Federal Bureau of Investigation (FBI) has disrupted the operations of Chinese state-sponsored hackers, identified as Flax Typhoon, by seizing seven internet domains. These domains were instrumental in the distribution and control of two distinct hacking tools: MicroScan and FishHub.

IDC Frontier, a prominent Japanese cloud and digital infrastructure provider, confirmed a ransomware attack on its IDCF Cloud service, resulting in a data center cluster outage that impacted the eastern region of Japan.

A sophisticated malware campaign, identified as 'Midnight Mimosa,' has been discovered pre-installed on low-cost Android smartphones. This malicious software is embedded directly into the device's firmware, allowing attackers to gain unauthorized control over the devices.

Hackers associated with a Chinese cybersecurity firm exploited vulnerabilities to steal emails from numerous organizations across Southeast Asia, including government bodies, law enforcement, healthcare systems, and religious institutions. The FBI, alongside agencies from six other countries, revealed this operation…

Cybersecurity threats continue to emerge with a notable incident involving a ransomware affiliate who allegedly betrayed their group by withholding profits. This event highlights internal trust issues within criminal organizations operating in the cybercrime landscape.

The FakeGit malware campaign has reactivated this month, distributing the SmartLoader malware through an estimated 17,610 malicious repositories hosted on GitHub. This resurgence follows a previous iteration of the campaign that focused on distributing the StealC infostealer.

Ethereum co-founder Vitalik Buterin has issued a significant warning to the cryptocurrency industry, emphasizing the urgent need to prepare for the potential impact of advanced artificial intelligence on encryption standards.