CyberNews North Korean Hackers Strike at Rust Ecosystem with Sophisticated Supply Chain Attack In a brazen and well-planned attack, North Korean hackers have compromised one of the most popular open source software (OSS) projects in the world. The target was the Rust ecosystem, specifically the arrayref crate, an essential utility for converting arrays that has been … Read more
A Critical Isolated-vm Vulnerability Has Been Discovered, Allowing Attackers to Take Control of Host Systems In a worrying development that highlights the ongoing cat-and-mouse game between security researchers and threat actors, a critical vulnerability has been discovered in isolated-vm, a popular Node.js library used by developers worldwide. The bug, which affects ExternalCopy, a function responsible … Read more
Sophisticated Phishing Toolkit Uses Passkeys to Maintain Access After Password Resets A new phishing toolkit has emerged, showcasing the rapidly advancing capabilities of cybercriminals. iAuthFlow V2, a malware tool sold on Russian-language cybercrime forums for $10,000, allows attackers to maintain access to victims’ accounts even after password resets. The toolkit’s primary mechanism is a “passkey” … Read more
Cybersecurity researchers have uncovered a sophisticated attack technique that allows malicious actors to bypass safety guardrails in popular AI-powered chat interfaces, potentially exposing users’ sensitive data. The method, dubbed “Cryptographic Context Injection,” exploits the way these systems handle encrypted prompts. The discovery was made by Adversa AI, which reported its findings to xAI on June … Read more
Cybersecurity Threats on the Rise: Recent Attacks Highlight Vulnerabilities in Systems and Infrastructure A spate of recent attacks has highlighted the ongoing threat landscape for cybersecurity professionals and individuals alike. From compromised networks to exploited vulnerabilities, these incidents serve as a stark reminder of the importance of robust security measures. One of the most concerning … Read more
A Perfect Storm of Cyber Threats: Zombie Cards, DDoS Attacks, and Exploited Vulnerabilities This week’s cybersecurity news is filled with a mix of alarming threats, ingenious attacks, and disturbing trends that highlight the evolving nature of cybercrime. From compromised network infrastructure to exploited vulnerabilities, we’ll break down the key stories and what they mean for … Read more
Retired US General Paul Nakasone Launches Boutique National Security Advisory Firm, Offering High-Level Cybersecurity Services to Private Clients Former US Army General Paul M. Nakasone, who led the National Security Agency and US Cyber Command until his retirement in February 2024, has launched a new national security advisory firm called The Nakasone Group. This boutique … Read more
**OpenAI Takes Major Step Towards AI Security with New Controls** In a move that comes after last month’s high-profile breach of Hugging Face, OpenAI has implemented a slew of security controls to prevent similar incidents in the future. While these new measures are certainly welcome, some experts argue that they should have been put in … Read more
**City Halls Under Siege: How Cybersecurity Experts Can Help** Imagine a city’s housing authority losing nearly $1 million without even realizing it. No ransom demands, no locked servers – just a quietly orchestrated heist that went undetected until it was too late. This isn’t a federal agency or a Fortune 500 company; it’s a local … Read more
A sophisticated malware campaign has compromised 14 popular npm packages, injecting a Linux backdoor known as RedC2 4.0 into unsuspecting users’ systems. This attack leverages artificial intelligence-assisted command and control (C2) capabilities to evade detection, making it a particularly insidious threat. The affected packages, used by millions of developers worldwide, were quietly modified to include … Read more