CyberNews

Dragos, a leading provider of industrial control system (ICS) cybersecurity solutions, has completed its acquisitions of NetRise and runZero, following Accenture’s $4.1 billion majority investment in the company earlier this year. This strategic move is part of Accenture’s ambitious OT cybersecurity push, which aims to strengthen the defenses of critical infrastructure operators against increasingly sophisticated … Read more

Noopur Davis’s Unlikely Rise to Global CISO at Comcast In an extraordinary career trajectory, Noopur Davis has risen from a humble software developer to become the global Chief Information Security Officer (CISO) of Comcast, one of the world’s largest media and technology companies. What sets her apart is that she never had a pre-planned career … Read more

Cybersecurity experts are sounding the alarm over a pair of severe vulnerabilities in widely used network devices and software, which hackers are actively exploiting to gain command and system access. The flaws, affecting Zyxel’s firewall appliances and Veeam’s data protection platform, have left thousands of organizations exposed to potential attacks. The common thread between these … Read more

A newly discovered vulnerability in WordPress, known as Comment2Shell, is putting millions of websites and their administrators at risk. The flaw allows an attacker who can inject malicious code through anonymous comments on a site to gain access to administrative sessions, potentially leading to devastating consequences for website security. The Comment2Shell bug is a classic … Read more

A Critical Meta Muse Setting Could Let Attackers Hijack AI Assistants, Exposing Users to Risk A vulnerability in a popular artificial intelligence (AI) assistant has been discovered, allowing potential attackers to exploit it and turn the tool into a backdoor. The issue lies in a seemingly innocuous setting within the AI’s metadata, which could be … Read more

Noopur Davis, the Unlikely Global CISO of Comcast In an extraordinary tale of happenstance and adaptability, Noopur Davis has risen to become one of the world’s most influential cybersecurity leaders without ever planning a career in the field. As the Global Chief Information Security Officer (CISO) at Comcast, she leads multiple security teams across the … Read more

Fake LastPass Installers Deliver Kernel-Level EDR Killer and Info-Stealer A sophisticated impersonation campaign has been uncovered, using fake LastPass installers to distribute a malware known as Rapuncel, which targets security tools and steals sensitive information. The attackers’ tactics include brand spoofing, SEO optimization, and the use of cloud-based infrastructure to evade detection. The campaign, which … Read more

A trio of critical vulnerabilities in widely used network equipment and data backup software has left thousands of organizations exposed to devastating cyber attacks. The flaws, discovered in Zyxel’s networking devices and Veeam’s cloud-based backup solution, have been confirmed by multiple sources as being actively exploited in the wild, giving attackers unfettered access to compromised … Read more

A Newly Discovered Flaw in WordPress Exposes Admin Sessions, Turning Anonymous Comments into Ransomware Goldmines Security researchers have uncovered a critical vulnerability in WordPress, a popular content management system (CMS) used by millions of websites worldwide. The flaw, which has been dubbed “Comment2Shell,” allows an attacker to exploit a seemingly innocuous anonymous comment left on … Read more

A recently disclosed vulnerability in Meta’s Muse AI assistant has the potential to turn a seemingly innocuous chatbot into a backdoor for attackers, allowing them to gain unauthorized access to users’ personal data and devices. This flaw, which affects the “muse:search” endpoint, enables an attacker to bypass security measures and inject malicious code, effectively converting … Read more