CyberNews Brevo Supply Chain Attack Injects Malware into Over 100,000 Websites A sophisticated supply chain attack has compromised a popular customer engagement platform, injecting malware into more than 100,000 websites. Brevo, which provides services to businesses and individuals alike, was hacked through a vulnerability in its Single Sign-On (SSO) functionality, allowing attackers to access sensitive information … Read more
A major blow to cybercrime operations: NightmareStresser, a notorious distributed denial-of-service (DDoS) for-hire service, has been severely disrupted in an international operation led by the US Department of Justice. The FBI’s move marks a significant victory in the ongoing battle against online threats, with authorities seizing the internet domains associated with the booter service and … Read more
A devastating vulnerability in OpenAI’s sign-in system has been exposed, allowing hackers to gain access to employee ChatGPT and Codex accounts. The exploit was built using AI-powered tools and exploited a flaw in an image-processing library used by Discourse, the platform hosting OpenAI’s community forum. Hacktron, a security firm, discovered that uploading HEIC/HEIF photo files … Read more
A Ransomware Developer’s Downfall, AI-Driven Attacks on the Rise, and Critical SAP Flaw Exposed In a significant win for cybersecurity efforts, a Ukrainian IT specialist has been sentenced to nearly 13 years in prison by a Zurich court for developing ransomware used in extortion attacks on companies. The verdict marks a major milestone in the … Read more
A Growing Concern: OAuth Consent Abuse Exposes Organizations to Persistent SaaS Access Security teams have long relied on multifactor authentication (MFA) to protect against cyber threats. However, a growing concern is emerging that MFA alone may not be enough to prevent a specific type of attack known as OAuth consent abuse. This insidious threat allows … Read more
23 Million User Records Compromised in Gyazo Data Breach A major data breach has compromised the sensitive information of over 23 million users of Japan-based software company Helpfeel’s image-sharing service, Gyazo. The breach occurred when a hacker exploited a vulnerability on the platform’s image upload server, allowing them to access a database containing user records. … Read more
Cybersecurity Researchers Uncover Vulnerability in OpenAI’s Sign-In System, Gain Access to Internal Code Repositories A recent exploit built using artificial intelligence (AI) has raised concerns about the security of even the most advanced systems. Researchers at Hacktron discovered a vulnerability in an image-processing library used by OpenAI’s community forum, which they then chained with a … Read more
A Trio of Cybersecurity Stories Highlights Growing Threats to Businesses and Individuals Alike In a series of concerning developments, cybersecurity experts are sounding the alarm on emerging threats that could have far-reaching consequences for organizations and individuals alike. From the rise of sophisticated AI-powered attacks to the exploitation of critical vulnerabilities in widely used software, … Read more
Cybersecurity experts have long touted multifactor authentication (MFA) as a foolproof way to protect user accounts from unauthorized access. However, a growing threat known as OAuth consent abuse is proving that even with MFA in place, attackers can still gain access to sensitive data and systems through a single convincing consent prompt. OAuth consent abuse … Read more
Rapid Adoption of Autonomous AI Leaves Organizations Behind in Governance A new survey has revealed a concerning trend among organizations rapidly deploying autonomous artificial intelligence (AI) systems. Despite having formal AI governance policies in place, many senior executives admit that their processes and controls are not keeping pace with the rapid adoption of these cutting-edge … Read more