Newly SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode

**Newly Discovered SLEEPWALKER Backdoor Allows Attackers to Bypass Security Measures** A critical vulnerability has been discovered in various systems, allowing attackers to inject malicious code and gain unauthorized access. Dubbed SLEEPWALKER, this stealthy backdoor exploits a weakness in the way certain software processes packets of data, making it possible for hackers to bypass security measures … Read more

INTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud Crackdown

Global authorities have made a significant dent in cybercrime operations, with INTERPOL’s Operation Jackal IV netting 58 arrests and identifying over 263 suspects worldwide. The operation, which involved law enforcement agencies from 24 countries, targeted organized crime groups that have been using sophisticated cyber tactics to defraud victims. At the heart of this global crackdown … Read more

CISA Warns of Exploited Gitea Vulnerability

A critical vulnerability in the widely used open source software development platform Gitea has been exploited in the wild by attackers. According to a warning issued by the US Cybersecurity and Infrastructure Security Agency (CISA), organizations that haven’t patched the flaw are at risk of remote code execution attacks. Gitea, which provides Git hosting, code … Read more

Sensitive Information Exposed in Nutex Health Data Breach

A sensitive data breach has hit Nutex Health Inc., a healthcare management and operations company based in Houston. According to an SEC filing, hackers gained unauthorized access to the company’s network, potentially exposing confidential or private information related to patients, employees, providers, business and financial operations, and intellectual property. The breach occurred when hackers accessed … Read more

Nigeria Looks to Sovereign Cloud for Cyber, National Security

Nigeria Takes Bold Steps Towards Sovereign Cloud Initiative, Boosting National Security and Economy In a significant move towards strengthening its digital sovereignty, Nigeria has launched a comprehensive initiative to create its own sovereign cloud infrastructure. This ambitious project aims to reduce reliance on foreign data storage and cloud providers, enhance national security, and drive economic … Read more

Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes

A new wave of highly convincing phishing attacks has emerged, targeting Apple device owners who have reported their devices stolen. The scammers use artificial intelligence (AI) to pose as genuine Apple support agents, tricking victims into revealing sensitive information that can be used for malicious purposes. This alarming trend highlights the ever-evolving tactics used by … Read more

Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload

A Critical Vulnerability in Gitea, a popular open-source platform for managing Git repositories, has been actively exploited by attackers. The vulnerability, a Remote Code Execution (RCE) flaw, allows hackers to inject malicious code on compromised servers, potentially leading to data breaches and unauthorized access. Gitea is widely used by developers and organizations to manage their … Read more

Linux Foundation to Govern TRACE, an Open Standard for AI Runtime Attestation

As organizations increasingly deploy artificial intelligence (AI) agents in production environments that handle sensitive data and span multiple systems, a new open standard for AI runtime attestation has emerged. The Linux Foundation has announced its governance of TRACE (Trust, Runtime Attestation and Compliance Evidence), a specification designed to provide verifiable evidence of how AI agents … Read more

Is Cyber Facing an Affordability Crisis?

A Growing Chasm in Cybersecurity Funding Leaves Small Businesses Vulnerable The world of cybersecurity is facing a daunting challenge: as breach costs reach unprecedented heights and defense spending nears $240 billion, small businesses are being left perilously exposed to cyber threats. The global average cost of a data breach has skyrocketed to a record $4.99 … Read more

Finding Nemo(Claw): Networking Issue Allows for LLM Poisoning in OpenClaw

A Critical Vulnerability in NVIDIA’s OpenClaw Tool Puts AI Agents at Risk of Persistent Poisoning Researchers have uncovered a significant flaw in NVIDIA’s OpenClaw tool, which could allow attackers to silently poison large language models (LLMs) used by AI agents. The vulnerability, discovered in NemoClaw and its Ollama API, exposes the local model server to … Read more