CyberNews

As of yesterday, a critical vulnerability in the open-source AI agent platform Ruflo has left enterprise AI deployments at risk of malicious activities. The flaw, tracked as CVE-2026-59726, allows attackers to access the platform without logging in and conduct various malicious actions from within the orchestration framework. Researchers at Noma Security’s Noma Labs discovered the … Read more

Security scanners embedded in software development pipelines are designed to identify vulnerabilities and harden code. However, they can also become a gateway for attackers if not properly secured themselves. A recent investigation by security researchers at ZeroPath has uncovered a worrying trend where specialized application security scanning tools can be compromised to serve as a … Read more

A sophisticated cyberattack on AI firm Hugging Face has left cybersecurity experts scrambling for answers. The incident, which began with a blog post from Hugging Face detailing a sustained attack, has since been revealed to be an internal test gone wrong by OpenAI. At its core, this story is about the intersection of artificial intelligence … Read more

A Japanese manufacturer has been targeted by a sophisticated cyberattack that leverages a rare and complex technique called Bring Your Own Vulnerability Disclosure (BYOVD). Dubbed “SilverFox,” this campaign employs a three-stage attack chain involving a 3-Driver BYOVD exploit, followed by the deployment of the ValleyRAT malware. The incident highlights the growing threat landscape and underscores … Read more

**Korean Websites Under Siege: Hackers Exploit AnySign4PC Loophole to Install Malicious Backdoors** A sophisticated cyber attack campaign is unfolding across Korea, with hackers exploiting a previously unknown vulnerability in software called AnySign4PC. By compromising Korean websites and using them as unwitting accomplices, the attackers are able to silently install backdoor malware on unsuspecting users’ computers … Read more

Ruflo AI Hosting Platform Exposes Enterprises to Malicious Agent Swarms and Persistent Memory Tampering A critical vulnerability in the open-source AI agent platform Ruflo has left enterprise AI deployments vulnerable to malicious activities, including the unleashing of swarms of AI agents that can wreak havoc on systems. The flaw, dubbed “RufRoot,” allows an unauthenticated attacker … Read more

Security Scanners Turned Against Us: The Dark Side of AppSec Tools A growing concern in the cybersecurity world is emerging as researchers uncover a new vulnerability in the software supply chain. Application security (AppSec) scanners, designed to strengthen code and protect against attacks, are being exploited by attackers to gain access to development environments and … Read more

Amazon’s investigation into the recent npm hijack, which compromised thousands of JavaScript packages and led to widespread malware infections, has pointed to North Korea’s cyber espionage group, Sapphire Sleet, as the likely culprit. The hack was initially attributed to a debug tool called Chalk, but new evidence suggests that Sapphire Sleet used advanced AI-powered methods … Read more

A growing threat to critical infrastructure has prompted the US Federal Communications Commission (FCC) to take swift action, blocking the importation of new foreign-produced robots and power inverters due to significant cyber risks. The move is a stark reminder that even seemingly innocuous devices can pose a substantial threat to national security. The FCC’s decision … Read more

Russian Hackers Exploit Microsoft OWA Flaw, Bypassing Security Measures to Maintain Access to Mailboxes A sophisticated cyber attack uncovered recently has left security experts concerned about the potential for malicious actors to evade even the most robust security measures. Russian hackers have been exploiting a previously unknown vulnerability in Microsoft’s Outlook Web Application (OWA), allowing … Read more