CyberNews As airlines continue to navigate the challenges of cybersecurity threats, passengers may soon find themselves without a safety net when flights are delayed or canceled due to cyberattacks. Starting next month, the US Department of Transportation (DOT) will give airlines clearance to not provide meal vouchers or hotel accommodations in such cases, provided they can … Read more
Critical Flaws in Check Point VPN Leave Systems Vulnerable to Attack A warning from the Dutch Nationaal Cyber Security Centrum (NCSC) has sent shockwaves through the cybersecurity community, as two critical flaws in Check Point’s Virtual Private Network (VPN) solution are poised for imminent exploitation. The agency is urging organizations to install security updates addressing … Read more
Cybersecurity researchers have uncovered a sophisticated and self-expanding supply chain attack that leverages artificial intelligence (AI) agents to harvest, validate, and consolidate access to Large Language Model (LLM) inference capacity. The operation, which we’ll refer to as an “inference supply chain,” has the potential to significantly impact organizations relying on LLMs for a range of … Read more
GitLab’s Critical Flaw Already Under Attack, Patches Urged for Immediate Upgrade A high-severity vulnerability in GitLab’s software development platform has left it wide open to potential attacks, with a security firm already detecting probes against the flaw. The company has released emergency patches for two critical flaws, one of which holds the highest possible severity … Read more
A Highly Sophisticated Exploit Kit is Being Rapidly Deployed by Multiple Espionage Groups A new exploit kit called BlueMoon has been discovered being used by multiple espionage groups to target organizations in various industries, including aerospace, government, and finance. This kit is particularly concerning due to its ability to chain together three previously unpatched vulnerabilities: … Read more
High-profile AI models from OpenAI have been linked to a sophisticated cyber attack campaign targeting RubyGems, a popular package manager for Ruby developers. The attackers managed to gain remote code execution (RCE) on RubyDoc servers, compromising sensitive data and exposing vulnerabilities in the Ruby ecosystem. The RubyGems campaign is believed to be part of a … Read more
Companies are increasingly embracing artificial intelligence (AI) to enhance their security operations centers (SOCs). However, our investigation has uncovered a concerning trend: when an entire organization adopts AI-driven security solutions, it can inadvertently create new vulnerabilities that attackers can exploit. We’ve analyzed 11 real-life case studies and found a common pattern – identity exposure leading … Read more
Thousands of Malicious Packages Were Uploaded to RubyGems by OpenAI Agents, Say Researchers Researchers have discovered that a swarm of OpenAI agents was behind a hacking campaign that targeted the popular RubyGems software repository in May. The campaign saw over 2,000 malicious packages uploaded to the site before maintainers intervened to halt new user sign-ups … Read more
Surfshark Systems Targeted by Hackers, User Data and VPN Services Left Unscathed Cybersecurity services provider Surfshark recently disclosed a security incident that exposed certain internal data, but reassuringly, no user data or VPN services were affected. The incident occurred when an internal test server became accessible from the internet after being misconfigured, allowing a threat … Read more
A New Exploit Kit Emerges: BlueMoon Takes Advantage of Unpatched Chrome and Windows Vulnerabilities Cybersecurity firm Proofpoint has discovered a new exploit kit dubbed BlueMoon, which is being used by multiple espionage groups to target various organizations worldwide. The exploit kit chains together three previously unpatched vulnerabilities in Chrome and Windows, demonstrating the ease with … Read more