CyberNews

A Critical Vulnerability in WebSockets Protocol Exposed by Recent Exploit Researchers have discovered a severe vulnerability in the WebSockets protocol, which is used for real-time communication between web servers and clients. The exploit, detected by the SANS Internet Storm Center (ISC), allows an attacker to execute arbitrary code on a server-side application, compromising system security. … Read more

A New macOS Malware Threat: AmnesiaStealer Steals Data and Takes Control of Browser Sessions A sophisticated piece of malware has been discovered targeting macOS users, with alarming capabilities that allow attackers to steal sensitive data and even control browser sessions. Dubbed AmnesiaStealer, this multi-stage threat is being spread through fake GitHub download pages in recent … Read more

A critical zero-day vulnerability in GeoServer, a widely used open-source platform for geospatial data processing and sharing, has been exploited by hackers just hours after its public disclosure. According to attack surface management firm WatchTowr, threat actors have begun probing vulnerable systems using this unpatched security defect, which can be exploited to execute remote code … Read more

President Trump has signed a national security memorandum that paves the way for private sector companies to collaborate with law enforcement in carrying out hacking operations against transnational criminal organizations. The move marks a significant shift in how the government tackles cybercrime, and raises questions about the potential risks and benefits of involving private industry … Read more

As AI models continue to advance at breakneck speed, researchers are sounding the alarm about a concerning trend. The “middle class” of smaller AI models, often overlooked in favor of their more powerful and expensive counterparts, is rapidly improving its hacking capabilities. According to new research from XBOW, these mid-tier models are now capable of … Read more

A tech contractor’s insider attack on Brightly Software has resulted in a two-year prison sentence, highlighting the risks companies face when entrusting sensitive data to third-party contractors. Cameron Nicholas Curry, also known as “Loot,” exploited his access to the company’s network to steal corporate data and extort $7,540.92 from Brightly Software. Curry, who worked as … Read more

A Presidential Memo Sparks Fears of Abuses in Private Sector-Federal Law Enforcement Cyber Hacking Alliance The recent signing of a presidential memorandum by President Trump has left cybersecurity experts divided on its implications. The memo authorizes private sector companies to collaborate with federal law enforcement agencies in hacking operations against transnational criminal organizations, raising concerns … Read more

Apple has been sending out “Threat Notification” alerts to iPhone users over the past few days, warning them of potential mercenary spyware attacks. These notifications are not new, but they’re certainly alarming, especially for those who have received them. The alerts are part of a feature Apple introduced in 2021, which detects highly targeted mercenary … Read more

A New Era of Private Sector Involvement in Cyber Offense: What It Means for You and Your Business In a significant development that’s been making waves in cybersecurity circles, President Donald Trump has signed a national security memorandum that paves the way for private sector companies to play a larger role in helping law enforcement … Read more

As AI models continue to push the boundaries of what is possible in hacking and exploitation, a growing class of mid-tier models has emerged as a significant threat. Researchers at XBOW have found that these smaller models, often proprietary or open-source, are becoming increasingly capable of performing complex tasks, rivaling even the most advanced frontier … Read more