CyberNews

Kimsuky, a North Korean threat group, has been spotted building an offline AI-powered toolset designed to supercharge its phishing and malware development capabilities. This new arsenal, dubbed “offline AI stack,” is poised to significantly amplify Kimsuky’s attack vectors, putting organizations at increased risk of cyber compromise. At the heart of this toolset lies a sophisticated … Read more

A pair of critical vulnerabilities in SonicWall’s SMA1000 secure remote access gateway has been exploited by ransomware gangs, leaving countless organizations at risk. The flaws, which were patched by SonicWall in mid-July, have already been targeted in zero-day attacks, with threat actors deploying custom malware on vulnerable VPN appliances. The affected vulnerabilities, tracked as CVE-2026-15409 … Read more

TrueConf Server Vulnerabilities Allow Malicious Installers to Slip In Undetected A concerning report has emerged of vulnerabilities in TrueConf servers being exploited by attackers to inject malicious client installers, raising questions about the security posture of organizations that use these conferencing platforms. According to sources, at least 11 companies have fallen prey to this tactic, … Read more

Identity Exposure Unleashes Devastating Chain Reactions in Cyberattacks A disturbing trend has emerged in the world of cybercrime, where identity exposure is being used as a stepping stone to launch devastating attacks. The alarming reality is that once an attacker gains access to sensitive information about an individual or organization, they can exploit it to … Read more

A new class of attacks has emerged, targeting sensitive information stored in password managers and multi-factor authentication (MFA) systems. Dubbed “Passkey Attacks,” these exploits can recover synced private keys or bypass phishing-resistant MFA, leaving users vulnerable to credential theft and identity compromise. The Passkey Attack methodology relies on exploiting a previously unknown vulnerability in the … Read more

Kimsuky’s Stealthy Offline AI Stack Exposes Millions to Phishing and Malware Attacks A sophisticated cyber threat actor group, Kimsuky, has been building an offline artificial intelligence (AI) stack that enables them to boost phishing attacks and automate malware development. This disturbing capability puts millions of individuals at risk, highlighting the evolving nature of cyber threats. … Read more

Metabase Patches Critical SQL Injection Vulnerability Exploited in Wild A critical-severity SQL injection vulnerability in Metabase’s data analytics solutions has been exploited by attackers as a zero-day, allowing them to gain administrative access and steal sensitive data. The company has released urgent patches for the flaw, which affects multiple versions of its software. The vulnerability … Read more

The US Water Sector Under Siege: Cyberattacks Hit at Least 12 States, Raising Concerns Over Public Safety A growing number of states across the country are coming forward to confirm that their water and wastewater facilities have been targeted in a coordinated hacking campaign. At least 12 states have reportedly been affected, with New Jersey … Read more

Critical Progress LoadMaster Flaw Exposed to Hackers Worldwide A severe security vulnerability in the popular Application Delivery Controller (ADC) and server load balancer, Kemp LoadMaster, has been actively exploited by hackers. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that this critical command injection flaw can allow unauthenticated attackers to execute arbitrary commands … Read more

Steam Hardware Customers Hit by Data Breach After CEVA Logistics Hacking Valve, the company behind the popular digital distribution platform Steam, is notifying its hardware customers in Europe that their data has been stolen following a hacking incident at its shipping partner, CEVA Logistics. The breach has exposed sensitive information, including names, addresses, phone numbers, … Read more