Earlier in Cybersecurity
Threat actors are actively exploiting a critical security flaw in JFrog Artifactory, a widely used software artifact repository, just days after the vulnerability was publicly disclosed and patched. The exploit targets CVE-2026-82329, an authentication bypass vulnerability that carries a severe…
Cybersecurity researchers have identified a cluster of 13 malicious Composer theme packages hosted on Packagist, a popular repository for PHP packages. These packages were found to inject malicious JavaScript code into Vietnamese movie and comic streaming websites that utilize them.
The Iranian hacking group Nimbus Manticore has been identified by Russian cybersecurity firm Kaspersky as the perpetrator behind two new malware families. These families represent a significant evolution in the group's capabilities, particularly in their ability to develop cross-platform remote…
Cyber threat actors are increasingly prioritizing the use of repeatable and reliable attack methods over developing novel techniques, according to observations from Microsoft's security teams. The most prevalent method for gaining initial access into companies last year involved a deceptive…
METR, a research non-profit focused on evaluating frontier artificial intelligence models for their capacity to perform long-horizon, agentic tasks, disclosed on May 23, 2024, that it experienced two significant security incidents.
Cybersecurity researchers have identified a sophisticated tactic, termed GuardBreaker, employed by a Russia-aligned threat actor known as UAC-0099. This technique aims to subvert artificial intelligence (AI)-assisted analysis of malware, specifically targeting systems in Ukraine.
Threat actors are actively exploiting two critical vulnerabilities affecting Langflow and Ruby on Rails, according to new findings from VulnCheck. These vulnerabilities are being leveraged for credential probing and command-and-control (C2) activities, indicating a significant security risk for users…