The CYBER media, unfolded.
Breaches, ransomware, zero-days, vulnerabilities, encryption and privacy — who was hit, how, and what to patch.
2,236 reports across 7 topics, updated hourly.
Cybersecurity researchers have identified a significant threat targeting cryptocurrency users through the Mozilla Firefox browser, uncovering 16 malicious extensions designed to steal sensitive wallet information. These extensions, discovered by researchers at Trust Wallet, masquerade as legitimate wallet portals, desktop utilities…
A comprehensive report released on Monday details how the global food system is deeply embedded with exploitation, affecting approximately 1.4 billion individuals involved in food production, processing, distribution, and delivery.
The U.S. State Department announced a reward of up to $10 million for information that leads to the identification or location of Zhang Yu, a Chinese national. Zhang Yu has been charged in the United States in connection…
The U.S. Department of Justice (DoJ) announced federal charges on Wednesday against Zohar Pinhasi, a 50-year-old dual U.S. and Israeli national, for allegedly defrauding victims of ransomware attacks. Pinhasi, who is also known by aliases such as Zack Silver…
During the second day of Pwn2Own Ireland 2026, held in Dublin, security researchers demonstrated remarkable skill by successfully exploiting three previously unknown vulnerabilities, or zero-days, within the Samsung Galaxy S26 smartphone.
The npm package 'tensorlake', a TypeScript Software Development Kit (SDK) designed for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a sophisticated supply chain attack identified as ChainDrop, which also deployed the Shai-Hulud malware.
Unsloth Studio, a new beta desktop application designed to make fine-tuning and running AI models faster, easier, and more affordable, has implemented enhanced safety protocols in response to significant security incidents.
Ethereum researcher Justin Drake has urged cryptocurrency users to adopt a "bunker mode" strategy, recommending the immediate transfer of funds to newly generated wallet addresses. This advisory stems from Drake's concern that advancements in artificial intelligence could pose a significant…
Yiannis Giovanoglou, the owner of ransomware remediation firm MonsterCloud, has been charged with allegedly defrauding ransomware victims. The charges stem from accusations that Giovanoglou secretly paid ransoms to attackers on behalf of his clients to obtain decryption keys, while simultaneously…
The Federal Bureau of Investigation (FBI) has issued a public service announcement (PSA) detailing ongoing cyberattacks, termed FortiBleed, which are actively targeting internet-exposed Fortinet FortiGate firewalls and Secure Sockets Layer (SSL) Virtual Private Network (VPN) gateways.
Ethereum Foundation researcher Justin Drake issued a significant warning on March 12, 2024, regarding the potential for artificial intelligence to break cryptocurrency encryption before the advent of quantum computing. Drake advised Ethereum holders to proactively move their funds to unused…
The increasing sophistication of artificial intelligence (AI) presents growing security risks, with experts warning that advanced AI could be leveraged by malicious actors to conduct highly effective cyberattacks. As AI capabilities expand across various domains, the potential for these systems…
Hackers successfully compromised the country-code top-level domain (ccTLD) registries for Ghana, American Samoa, and Sierra Leone, leading to the unauthorized issuance of HTTPS certificates for several Google domains and the subsequent hijacking of associated websites.
Hackers have potentially compromised the personal data of 850,000 members of Seoul's Yoido Full Gospel Church, with a security firm identifying signs that artificial intelligence agents were utilized to facilitate the attack.
Cybersecurity researchers from CloudSEK and Checkmarx have detailed a persistent npm supply chain malware campaign, codenamed MALFEX, that has been distributing information stealers and remote access trojans (RATs) to compromised systems.
SonicWall has released critical hotfixes for four security vulnerabilities discovered in its Secure Mobile Access (SMA) 1000 series appliances. These appliances serve as gateways, providing remote workers with secure access to a company's internal network and applications.
Microsoft announced that it will implement a security measure to block .msix and .msixbundle file attachments in Outlook Web and the new Outlook Windows client. This change is scheduled to take effect starting next month, November.
A critical vulnerability has been identified in LMCache, an open-source software component designed to accelerate large language model (LLM) servers, including popular frameworks like vLLM. This flaw, designated as a critical security issue, permits unauthenticated attackers to execute arbitrary code…
Cybersecurity researchers have identified a new malware family, named PoeLLM, that is actively targeting exposed artificial intelligence (AI) and large language model (LLM) infrastructure. The primary objective of this financially motivated campaign, which has been dubbed Canto Incognito, is…
A new cryptomining campaign is leveraging the PoeLLM malware to compromise exposed Artificial Intelligence (AI) services, transforming vulnerable servers into tools for illicit cryptocurrency extraction and network reconnaissance. The malware's primary objective is to enlist these compromised AI servers…