CyberNews A China-linked threat actor has been exploiting a critical vulnerability in Sogou Input Method, a widely used input software on Chinese devices, to deploy a sophisticated backdoor known as GRAYRABBIT. The attack vector, attributed to UNC3569, marks a significant escalation of cyber threats targeting the Asian region. The Sogou Input Method is a popular keyboard … Read more
A group of threat actors has exploited a combination of vulnerabilities in JFrog Artifactory, a popular software repository manager, to gain administrative control and plant backdoors on affected systems. The attack highlights the importance of robust identity management and vulnerability patching in preventing lateral movement within an organization’s network. The attackers’ modus operandi involves chaining … Read more
Trezor Scrambles to Contain Phishing Campaign After Brevo Email Provider Breach A staggering 347,000 Trezor customers have been targeted in a recent wave of phishing attacks, with 2,500 users falling prey to malicious emails sent from compromised email accounts. The campaign, which exploited the security breach at third-party email provider Brevo, highlights the vulnerability of … Read more
Critical Flaws in Cisco FMC Software Expose Users to Ransomware Attacks and Credential Theft A pair of severe vulnerabilities in Cisco’s Firepower Management Center (FMC) software has left organizations exposed to a range of cyber threats, including ransomware attacks and credential theft. The flaws, which have been actively exploited by attackers, put users at risk … Read more
The print management software company PaperCut has issued emergency patches for two actively exploited vulnerabilities, but instead of replacing them with more comprehensive fixes, they’re providing a new set of patches that address these specific issues. This decision comes as a surprise to security experts, who warn that this approach may not be sufficient to … Read more
A sophisticated cyberattack attributed to a China-linked threat actor, UNC3569, has been discovered exploiting a vulnerability in Sogou Input Method, a popular Chinese input method editor (IME) used on millions of devices. The attackers leveraged this weakness to deploy a backdoor known as GRAYRABBIT, highlighting the risks of identity exposure and active attack paths. The … Read more
**Attackers Exploit JFrog Artifactory Flaws, Gain Admin Control and Plant Backdoors** A sophisticated attack has been discovered targeting JFrog Artifactory users, allowing malicious actors to gain admin control and plant backdoors on affected systems. The vulnerability, which was chained with identity exposure, allowed attackers to bypass security measures and establish a foothold in compromised networks. … Read more
The Unlikely Path to Cybersecurity Leadership: A Conversation with Vinnie Liu Vinnie Liu’s journey into the world of cybersecurity is a fascinating one, marked by an early start and a unique blend of curiosity and humility. At just 17 years old, he was recruited by the National Security Agency (NSA), where he spent two years … Read more
A Warning from Within: AI Insider Sounds Alarm on Unchecked Development Artificial intelligence researchers and developers have long warned about the potential dangers of creating superintelligent machines that could surpass human control. Now, a prominent researcher has come forward with a stark warning: the current pace of AI development is putting humanity at risk, and … Read more
August 2026 saw a surge in cybersecurity-related merger and acquisition (M&A) deals, with a total of 33 announced transactions that will significantly impact the industry. This month’s round-up highlights some of the most notable acquisitions, which demonstrate a shift towards integrating AI-driven technologies into existing platforms, expanding global reach, and enhancing cybersecurity capabilities. Brinqa, a … Read more