CyberNews **Malicious Image Exploit Leaks Secrets from AI-Coded Repositories** Researchers at the University of Missouri-Kansas City’s ASSET Research Group have unveiled a novel technique for stealing sensitive information from code repositories. Dubbed “Ghostcommit,” this exploit takes advantage of a review gap in popular coding agents to inject malicious instructions into images, which are then executed by … Read more
Okta Sounds Alarm on Sophisticated Vishing Attacks Targeting Microsoft 365 Users A wave of highly targeted and sophisticated vishing attacks is currently sweeping through various industries, with threat actors aiming to harvest sensitive information from unsuspecting Microsoft 365 users. The campaign, which kicked off in April, has been linked to a hacking group known as … Read more
Pakistani Police Networks Breached by China and India-Linked Hackers A recent investigation has uncovered a sophisticated cyberespionage campaign that targeted the Balochistan Police force in Pakistan, with hackers linked to both China and India quietly breaching their networks over a period of two years. The attackers gained access to sensitive data, including biometric databases, criminal … Read more
A third US cybersecurity expert, Angelo Martino, has been sentenced to 70 months in prison for helping a ransomware gang while working as a ransomware negotiator. This latest development highlights the increasing threat of insider threats and underscores the need for robust measures to prevent such collaborations. Martino, 41, from Florida, was accused of working … Read more
A Trio of Threats Exposed: Ransomware Affiliate Pleads Guilty, QuimaRAT Spreads Across Platforms, and More A spate of disturbing cybersecurity incidents has come to light in recent days, showcasing the ever-evolving tactics employed by threat actors. From a ransomware affiliate’s guilty plea to a subscription-based remote access trojan (RAT) platform being advertised on dark web … Read more
Cybersecurity researchers have uncovered a sophisticated attack vector that exploits a review gap in AI-assisted code review processes. Dubbed “Ghostcommit,” this malicious technique conceals prompt injection instructions within images, allowing attackers to steal sensitive information from repositories without raising suspicion. The attack works by embedding the malicious instruction inside a PNG image file, which is … Read more
A US Cybersecurity Expert Sentenced to 70 Months in Prison for Helping Ransomware Gang Angelo Martino, a 41-year-old cybersecurity expert from Florida, has been sentenced to 70 months in prison after pleading guilty to charges of helping a ransomware gang while working as a negotiator. This is the third high-profile case in recent years where … Read more
DHS Database Hacked, Adobe Boosts Patch Cadence, and More: A Week in Cybersecurity Review In what’s being described as one of the most significant cybersecurity events this year, a top official at the US Department of Homeland Security (DHS) has pleaded guilty to charges related to ransomware attacks. Karen Serobovich Vardanyan, a 34-year-old Armenian national, … Read more
AI coding tools have revolutionized software development in recent years, promising to boost productivity and efficiency. However, as organizations increasingly rely on these tools, security risks are emerging that may outweigh the benefits of AI-generated code. A growing body of research suggests that AI-coded applications are vulnerable to a range of issues, from OWASP Top … Read more
Social media platforms are facing increasing pressure from governments around the world to restrict or ban minors’ access to their services. In recent months, several countries have introduced laws aimed at protecting children’s mental health and safety online, with some platforms already feeling the heat. Australia was the first country to introduce a law restricting … Read more