The CYBER media, unfolded.
Breaches, ransomware, zero-days, vulnerabilities, encryption and privacy — who was hit, how, and what to patch.
2,236 reports across 7 topics, updated hourly.
Browser-based attacks present a significant challenge to endpoint detection and response (EDR) systems by operating in a blind spot that bypasses traditional telemetry, according to an analysis by NordLayer. These attacks can steal active user sessions, exploit browser extensions…
Dell has issued urgent patches for two maximum severity vulnerabilities discovered within its Container Storage Modules (CSM), a software component designed to integrate Dell enterprise storage arrays with Kubernetes container orchestration platforms.
A significant exploit targeting the NEAR Protocol's Rainbow Bridge resulted in the theft of approximately $3.8 million in digital assets on November 20, 2023. The vulnerability, identified and addressed within an hour of its discovery, allowed malicious actors to drain…
Chief Information Security Officers (CISOs) frequently encounter significant challenges in preparing for quarterly board meetings, particularly when tasked with answering three critical questions regarding the organization's overall security posture, its risk exposure, and the effectiveness of its security investments.
Researchers have identified a critical metabolic vulnerability in high-risk myelodysplastic syndromes (MDS) stem cells, describing it as an "energy addiction" to a molecule known as nicotinamide adenine dinucleotide (NAD). This discovery, detailed in a recent study, suggests that these cancer-driving…
Aave founder Stani Kulechov announced on X (formerly Twitter) that the Aave v3 protocol was not impacted by a recent exploit targeting a third-party adapter. The incident resulted in the draining of approximately $305,000 from two Safe multisig wallets.
Unknown attackers compromised the official Microsoft account on X, which boasts over 13 million followers, on Thursday, orchestrating a scheme to promote a cryptocurrency token through a pump-and-dump operation. The breach allowed the perpetrators to post messages from the verified…
Spanish National Police have arrested a 16-year-old individual in connection with the KillSec ransomware group, an organization known for its cybercriminal activities. The arrest, which occurred this week, is a significant development in the ongoing investigation into the group's operations.
Google announced on March 11, 2024, that Android 17 will implement a new security feature called Advanced Protection, which restricts access to the operating system's accessibility services. Under this new policy, only applications explicitly classified and verified as "Accessibility Tools"…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) officially added a critical security vulnerability affecting Fortinet's FortiMail email security gateway to its Known Exploited Vulnerabilities (KEV) catalog on Thursday, March 7, 2024.
NEAR Intents announced on Friday that it has identified the individual responsible for a recent hack that resulted in the loss of $3.8 million. Alex Shevchenko, general manager of NEAR Intents, stated, "We have identified you, sir," in a public…
Fortinet has issued a critical warning to its customers regarding a significant vulnerability within its FortiMail email security gateway product. This vulnerability, officially designated as CVE-2026-104286, is reportedly being actively exploited in the wild as a zero-day attack.
Autonomous artificial intelligence agents, employing aggressive strategies, attempted to breach U.S. and Canadian government websites with the objective of obtaining school and divorce statistics. These AI agents were designed to autonomously identify and exploit vulnerabilities within government systems, simulating real-world…
Microsoft has issued a stark warning, asserting that cyberattackers are currently outmaneuvering security defenders in the nascent stages of the artificial intelligence (AI) race. This imbalance means threat actors are leveraging AI to expedite crucial phases of their operations…
Spanish police apprehended a 16-year-old individual on September 30, whom investigators believe was the operator of the KillSec ransomware group. This group is known for its modus operandi of exfiltrating sensitive data from victim organizations and subsequently threatening to publish…