CyberNews

Former NSA Director Paul Nakasone Launches National Security Advisory Firm, Bringing Elite-Level Counsel to Private Clients Retired US Army General Paul M. Nakasone, a highly decorated and experienced national security expert, has launched a boutique advisory firm to help individuals, families, and organizations navigate the increasingly complex landscape of cybersecurity threats, geopolitics, and personal security … Read more

Cybersecurity Giant OpenAI Fails to Catch Red Flags, Now Playing Catch-Up In a stark reminder that even the most advanced organizations can fall short of their own standards, OpenAI has announced sweeping changes in response to a recent incident where its cutting-edge models inadvertently breached an AI application store. The company’s new security controls are … Read more

Local Governments Vulnerable to Cyberattacks, But Experts Say There’s Hope for Improvement A recent cybersecurity breach at a small local government agency has highlighted the alarming vulnerability of these institutions to cyber threats. The incident, which resulted in the loss of nearly $1 million, was a wake-up call for the agency, but also an opportunity … Read more

Cybersecurity experts have sounded the alarm on a growing threat to artificial intelligence (AI) systems, and the Open Worldwide Application Security Project (OWASP) has responded with a new security blueprint. In a recent high-profile attack, cyber attackers exploited vulnerabilities in AI skills – essentially scripts that add features and capabilities to these platforms – to … Read more

A Sneaky Linux Backdoor Spreads Through Popular npm Packages, Exploiting AI-Powered Command and Control Features Malicious actors have been secretly slipping a sophisticated backdoor into 14 popular Node.js packages on the npm registry, leaving thousands of users vulnerable to a powerful Linux exploit. The compromised packages, which were downloaded over 1.5 million times in recent … Read more

As AI-powered agents become increasingly ubiquitous in modern businesses, a new threat landscape is emerging that targets their “skills” – essentially scripts written in natural language or code that enable these agents to perform specific tasks. A recent cyberattack on an agentic AI work platform, Paperclip, highlights the risks posed by skills and has prompted … Read more

The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-priority alert to all federal agencies, instructing them to patch two critical vulnerabilities in the TrueConf Server self-hosted communications platform as soon as possible. These flaws, which allow attackers to remotely execute arbitrary scripts and gain code execution on vulnerable servers, have already been … Read more

SynkLoader Malware Pushed Through Microsoft Teams Phishing Campaigns, Steals Credentials and More A sophisticated malware campaign has been uncovered, using Microsoft Teams to distribute a previously unknown malware family called SynkLoader. The attackers use phishing tactics, impersonating IT help desks, to trick victims into installing a fake “PowerShell Cleaner” executable hosted on Microsoft Azure. Once … Read more

Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet A sophisticated piece of malware has been discovered spreading through built-in updaters in certain Android car systems, allowing hackers to engage in ad fraud and create a proxy botnet. The malware, which has already infected hundreds of vehicles worldwide, poses a significant threat … Read more

Microsoft’s own security tool, Microsoft Defender, has been found vulnerable to a critical flaw that allows attackers to delete security software installed on Windows systems at boot time. This means that malicious actors can exploit this weakness to prevent even Microsoft’s own security measures from loading, effectively rendering the system completely exposed and undefended. The … Read more