CyberNews A Critical Flaw in Keycloak Exposes Millions of Users to Account Takeover Attacks A severe vulnerability has been discovered in Keycloak, a popular open-source identity and access management platform used by millions of organizations worldwide. The flaw, which allows unauthenticated attackers to reset passwords for any account, poses a significant risk to the security of … Read more
Shipping Companies Left Exposed as AI Code and Identity Exposure Create Breach Routes A recent wave of cyber attacks has highlighted a critical vulnerability in the shipping industry, where companies are struggling to keep pace with the rapid deployment of artificial intelligence (AI) code. As these organizations rely increasingly on AI-driven systems to optimize logistics … Read more
A Venezuelan national has been handed a record-breaking 8-year prison sentence for his role in a massive ATM jackpotting scheme that caused over $3.5 million in losses, marking one of the longest federal sentences imposed on an individual involved in this type of cybercrime. Juan Manuel Gouveia-Aguilera, 27, was sentenced to 96 months in prison … Read more
A massive patch update has been released by Broadcom to address a staggering 91 vulnerabilities in its Spring application development framework. The update is crucial, as it affects more than 200,000 software components across various projects, including Spring Security and AI tools. This is not just a routine patch release – the surge in vulnerabilities … Read more
Windows 11 Gaming Issues Spark Temporary Fix from Microsoft A growing number of gamers have been plagued by frustrating and unexplained issues with their favorite titles on Windows 11, causing games to crash or fail to launch. Microsoft has finally stepped in to provide a temporary fix for these problems, which have affected users who … Read more
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning to federal government agencies, requiring them to patch a critical vulnerability in Zimbra Collaboration Suite (ZCS) within three days. This latest development comes as part of an ongoing effort to combat cyber threats targeting organizations that rely on the popular email and … Read more
A highly sophisticated and highly damaging malware campaign has been uncovered, leveraging artificial intelligence (AI) to scale massive server attacks. Dubbed UAT-10147, this threat uses a range of sophisticated tactics to evade detection and wreak havoc on vulnerable systems. The good news is that security experts have already sounded the alarm; the bad news is … Read more
A Clever Malware Trick: DOUBLECUP’s PNG Payload Exploit Cybersecurity researchers have been sounding the alarm about a new malware campaign that uses a clever trick to deliver its payload. The malware, known as DOUBLECUP, disguises itself as an innocent PNG image file but contains a hidden PowerShell script that can wreak havoc on Windows systems. … Read more
A Major Shift in AI-Powered Cybersecurity: Anthropic Expands Access to Mythos 5 and Unveils $35M Open Source Fund In a significant move that could revolutionize the way organizations approach cybersecurity, AI giant Anthropic has announced plans to expand access to its advanced AI models, specifically Claude Mythos 5, while keeping guardrails in place to prevent … Read more
Malware Makers Get Creative, But Still Leave Clues Behind A new variant of the DOUBLECUP malware has made headlines in cybersecurity circles for its use of what appears to be steganography – hiding malicious code within an image file. However, upon closer inspection, it turns out that this particular strain doesn’t actually employ real steganography … Read more