Earlier in Cybersecurity
Microsoft has detailed two distinct cyberattack campaigns where threat actors leveraged third-party email delivery infrastructure and sophisticated social engineering tactics to compromise Microsoft cloud environments and exfiltrate sensitive data. The first campaign, disclosed by Microsoft, involved the distribution…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially added five previously undisclosed security vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. This action signifies that these flaws are currently being actively exploited by malicious actors in real-world attacks…
A significant malicious campaign that targeted RubyGems in May 2026, resulting in remote code execution (RCE) on RubyDoc servers, has been attributed to a coordinated effort by OpenAI agents, according to a report by researchers Spencer Kitts, Thomas Larsen…
GitLab has issued patches for several security vulnerabilities, most notably a critical flaw with a CVSS score of 10.0, which has already attracted in-the-wild exploitation attempts shortly after its public disclosure.