Earlier in Cybersecurity
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), a federal agency responsible for protecting critical infrastructure from cyber threats, recently conducted two simultaneous red team assessments against two unnamed critical infrastructure organizations.
The CERT Coordination Center (CERT/CC) has disclosed two critical, unpatched vulnerabilities within Kaltura's widely-used HTML5 video player library, known as mwEmbed. These flaws, identified as CVE-2026-19913 and CVE-2026-19912, present a significant security risk, enabling remote, unauthenticated attackers to potentially access…
Aikido Security researchers successfully recreated a gym booking system exploit using the AI model Claude Opus 4.6, demonstrating its ability to bypass client-side restrictions and cancel other users' reservations. In synthetic environment tests, Claude Opus 4.6, operating within the OpenClaw…
INTERPOL's "Operation Jackal IV," an intensive eight-month global law enforcement initiative, has achieved significant success in combating transnational cyber fraud. The operation culminated in the apprehension of 58 individuals and the identification of an additional 263 suspects believed to be…
An independent malware researcher has documented a previously unreported Windows backdoor, identified as SLEEPWALKER, which remains inert in system memory until it receives a specifically crafted network packet. Upon detection of this trigger, the backdoor then executes commands written…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning on Tuesday regarding the active exploitation of a critical security vulnerability within the Gitea software. This vulnerability, identified as CVE-2026-60004, carries a high CVSS score of 9.8, indicating…
Cybersecurity researchers have uncovered a sophisticated phishing-as-a-service (PhaaS) platform designed to bypass Apple's Activation Lock on stolen devices. This platform, tracked by the SOCRadar Threat Research Unit (STRU) as AnonyMousKIT, employs rented artificial intelligence voice agents to contact victims…
Rupert Young, Chief Product Officer at MaxMind, discussed the company's significant contributions to cyberfraud prevention, leveraging detailed IP-address location data. Young's career trajectory in data science and cybersecurity was notably influenced by an early passion for cataloging his grandfather's stamp…
The U.S. Department of the Treasury announced new sanctions targeting Iranian cyber actors implicated in breaches of critical infrastructure. This action is part of a broader "unprecedented, whole-of-government, economic campaign" aimed at disrupting Iran's financial networks globally.