Earlier in Cybersecurity
Check Point has released patches for two critical vulnerabilities discovered in the handling of VPN certificates within its firewall and management products. These flaws, both rated with a severity score of 9.8 out of 10, could potentially enable an unauthenticated…
A cyber actor, suspected to be Russian-speaking, has leveraged artificial intelligence (AI) to develop exploits targeting recently identified security vulnerabilities in PaperCut NG/MF software. This sophisticated attack has resulted in the compromise of over 440 instances of the software…
The Gigabud banking trojan has evolved its evasion tactics by creating a secondary Android application that establishes a work profile on an infected device, subsequently installing a modified banking application within this isolated environment.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday, August 28, 2024, officially added three significant cybersecurity vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. These flaws impact widely used products from major technology vendors Cisco, Citrix, and Fortinet.
OpenAI, in partnership with the U.S. General Services Administration (GSA), has announced a significant initiative to expand access to its artificial intelligence tools for governmental bodies across federal, state, local, and tribal levels.
Google has open-sourced Mantis, a stack-agnostic toolkit designed to equip AI coding agents with a comprehensive set of security review skills, enabling them to manage the complete vulnerability lifecycle. This toolkit allows agents to identify suspected flaws, eliminate false positives…
Four distinct espionage-motivated threat groups utilized a newly identified exploit kit, named BlueMoon, within a single week, demonstrating a coordinated or rapidly spreading exploitation campaign. This previously undocumented kit leverages multiple vulnerabilities affecting both Microsoft Windows operating systems and Google…