CyberNews OpenAI’s AI models have been caught in a series of embarrassing security incidents, with six separate cases revealing hidden failures and unauthorized uploads. The company has confirmed that its models were compromised, exposing sensitive user data and potentially allowing attackers to exploit these vulnerabilities for malicious purposes. At the heart of these incidents lies the … Read more
A widespread, China-aligned cyber espionage campaign has been uncovered in Latin America, where a sophisticated backdoor known as SparroWocky is being used to compromise high-profile targets. The malicious software, dubbed FamousSparrow, has been deployed across multiple countries in the region, putting sensitive data and national security at risk. The attack vectors employed by the hackers … Read more
Cybersecurity experts have long warned about the dangers of identity exposure, and a recent wave of attacks has highlighted just how devastating this vulnerability can be. In a disturbing trend that’s been unfolding over the past year, hackers are using identity exposure to unlock active attack paths on websites, compromising sensitive data and disrupting business … Read more
A staggering number of organizations have fallen victim to a sophisticated attack vector, where identity exposure is used to unlock active attack paths. In an unsettling reality, 11 real-world cases have been documented, highlighting the ease with which attackers can exploit vulnerabilities and gain unauthorized access to sensitive systems. At its core, this type of … Read more
A Critical Vulnerability in DNSSEC Validator Exposes Systems to Remote Code Execution Attacks A severe flaw has been discovered in the Unbound DNSSEC validator, a widely used open-source software component that secures internet communications by verifying the authenticity of domain name system (DNS) data. The vulnerability, identified as CVE-2023-37091, could allow malicious actors to execute … Read more
Ransomware Attacks on Manufacturers Surge, Leaving a Trail of Destruction in Their Wake A disturbing trend has emerged in the world of cybersecurity: ransomware attacks on manufacturers are skyrocketing, with no signs of slowing down. According to recent reports, the number of incidents this year is 40% higher than the same period last year, and … Read more
The Internet Systems Consortium (ISC) has released a critical security update for BIND, a widely used open-source DNS server software, to address 14 vulnerabilities that could lead to denial-of-service (DoS) attacks. These flaws, which include seven high-severity and seven medium-severity bugs, can be exploited using various techniques such as mismatched NOQNAME proof, QTYPE TKEY queries, … Read more
A New Era in Compliance and Security: Comp AI Raises $34 Million for Agentic AI-Native Solutions In a significant development that underscores the growing importance of artificial intelligence (AI) in enterprise cybersecurity, Comp AI has secured $34 million in Series A funding to expand its governance, risk, and compliance (GRC) automation platform. The Florida-based startup’s … Read more
The US Federal Bureau of Investigation (FBI) has dealt a significant blow to cybercrime by taking down NightmareStresser, one of the world’s longest-running DDoS-for-hire platforms. This development marks another major victory for international law enforcement agencies in their ongoing efforts to dismantle malicious online services. NightmareStresser was a platform that allowed anyone to rent large … Read more
In just over a month, devices running Windows 11 Home and Pro editions will no longer receive critical security updates, leaving users exposed to potential cyber threats. Microsoft has announced that support for these versions of its popular operating system will come to an end on October 13, marking a significant milestone in the company’s … Read more