CyberNews As AI coding tools continue to revolutionize software development, a pressing concern has emerged in the cybersecurity community: who is responsible for vetting the code generated by these machines? The answer lies in the scale of open source ingestion, where developer adoption of AI assistants has outpaced traditional security measures. This has created a perfect … Read more
Trezor, a leading manufacturer of hardware cryptocurrency wallets, has disclosed a data breach that affects nearly 14,000 customers. The breach was caused by ShipMonk, Trezor’s shipping and logistics provider, being hacked by attackers who gained access to customer order data. The compromised information includes full names, shipping addresses, email addresses, and phone numbers of customers … Read more
Cybersecurity firm Trezor has disclosed a data breach that affects nearly 14,000 of its customers. The incident occurred when ShipMonk, Trezor’s shipping and logistics provider, was hacked by attackers who exploited a vulnerability in the third-party analytics platform Metabase. As a result, customers’ order data, including their full names, shipping addresses, email addresses, and phone … Read more
A new era in US cybersecurity has begun with a presidential memorandum that allows vetted private companies to conduct cyber operations under federal control against foreign cybercrime gangs. The initiative, managed by the National Coordination Center (NCC), marks a significant shift towards a more collaborative approach between the government and the private sector. The program … Read more
Fortinet, a leading cybersecurity company, has issued patches for eight vulnerabilities across its products, including two high-severity authentication flaws in FortiWeb and FortiManager. The patches address weaknesses that could allow attackers to bypass security controls or gain unauthorized access to sensitive systems. The most critical issue affects FortiWeb, where an attacker can exploit a flaw … Read more
Team8, a prominent Israeli venture capital firm, has secured an additional $365 million in funding, bringing its assets under management to nearly $2 billion since its inception in 2014. This new influx of capital will be used to support promising startups across various sectors, with a particular focus on AI and cybersecurity. The company’s venture-creation … Read more
A Notorious APT Group Juggles State Espionage and Cryptocurrency Theft from the Same Web Panel Researchers have uncovered a sophisticated mercenary group operating out of China that seamlessly switches between conducting high-stakes cyber espionage on behalf of nation-states and engaging in lucrative cryptocurrency theft. Dubbed “Jewelbug” by Symantec, this advanced persistent threat (APT) group has … Read more
WhatsApp’s Latest Defense Against Scammers: A New “Scam Alert” Feature In a bid to protect its massive user base from scammers, WhatsApp has started rolling out a new optional feature that uses machine learning to flag potential scam messages. The “Scam Alert” feature is now available in a limited beta rollout as part of the … Read more
The White House has announced a major expansion of federal capabilities against foreign cybercrime gangs through a new program that allows vetted private US companies to conduct targeted cyber operations under federal control. The initiative, managed by the National Coordination Center (NCC), aims to disrupt and dismantle foreign cyber-enabled transnational criminal organizations (TCOs) that pose … Read more
Fortinet Patches Critical Authentication Flaws in FortiWeb and FortiManager, Urges Users to Update Immediately In a significant move to shore up its defenses, network security giant Fortinet has released patches for eight vulnerabilities across its products, including two high-severity authentication bugs that could allow attackers to gain unauthorized access to sensitive systems. The company’s FortiWeb … Read more