CyberNews As many as 4,400 industrial control systems from Rockwell Automation were left exposed online without proper security measures in place, potentially leaving critical infrastructure vulnerable to cyber attacks. This staggering number has been discovered by researchers who have mapped out how these exposures can be exploited to create active attack paths. The affected devices are … Read more
A trio of vulnerabilities in popular web development tools has left thousands of developers and organizations exposed to potential attacks. AWS, Google Cloud, and Vercel, a leading platform for building fast and scalable websites, have all been affected by critical flaws that allow hackers to trigger sensitive tools without even running the underlying machine learning … Read more
A newly discovered vulnerability in Oracle’s database software has allowed attackers to bypass traditional security measures and gain unauthorized access to Windows systems. The exploit, which takes advantage of a weakness in the way Oracle handles SQL injection attacks, has been dubbed “khunt” by researchers. What sets this attack apart is its ability to turn … Read more
Silent Takeover: AI Recommendation Poisoning Exposes Vulnerabilities in LLMs A growing concern has emerged in the world of artificial intelligence (AI) as researchers have discovered a vulnerability that allows attackers to secretly manipulate the memory of large language models (LLMs). This phenomenon, known as “AI recommendation poisoning,” raises serious questions about the security and trustworthiness … Read more
Apple’s iCloud Private Relay, touted as a secure way to browse the internet privately, has been found to have a critical flaw that can expose real IP addresses through WebKit proxy bypasses. This vulnerability affects millions of users who rely on Apple devices and services for their online security. The issue stems from a complex … Read more
A critical vulnerability in a widely-used JavaScript library has left five cryptocurrency wallet apps exposed to potential theft, resulting in an estimated $5.7 million drained from user accounts. The issue lies in CryptoJS’s weak random number generator (RNG), which is used by the affected wallets to securely store and manage users’ cryptographic keys. The vulnerability … Read more
Cisco has just released patches for a critical batch of vulnerabilities affecting several of its products, including SD-WAN, IOS XE, and FMC. The company has addressed two dozen issues, with some of them being so severe that they could allow attackers to gain root privileges on affected devices. The most concerning vulnerability is in the … Read more
A notorious cyber attacker, known for exploiting vulnerabilities in cloud-based databases, has pleaded guilty to multiple breaches affecting at least 100 million individuals worldwide. The hacker, who was arrested last year and identified as “Snowflake,” had a history of targeting companies that use Amazon Web Services (AWS) and other popular cloud platforms. As part of … Read more
A Critical Vulnerability in TeamCity Exposes Thousands of Organizations to Remote Code Execution Attacks The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about an actively exploited vulnerability in the popular software development platform TeamCity. The flaw, designated as CVE-2026-63077, allows attackers to execute arbitrary code on affected systems, putting thousands of … Read more
Cybercrime Kingpin Sentenced to 16 Years for Running Ransomware-as-a-Service Empire A major blow has been dealt to the world of cybercrime, as a notorious creator of ransomware-as-a-service (RaaS) platforms has been sentenced to 16 years in prison. The sentencing marks a significant victory for law enforcement and cybersecurity experts, who have long battled against the … Read more