CyberNews A recently discovered vulnerability in Redis, a popular open-source in-memory data store, has been exploited by attackers using Kimi K3 agents, according to researchers. The exploit allows for remote code execution (RCE), giving hackers unfettered access to compromised systems. This zero-day vulnerability is particularly concerning as it can be used to gain control over servers … Read more
A Critical Vulnerability Patch Cycle Hits NodeBB, Leaving Admin Access and Private Chats Exposed NodeBB, an open-source discussion forum software used by millions of users worldwide, has just completed a massive patch cycle to address eight critical vulnerabilities in its codebase. These flaws, discovered using advanced AI-powered analysis tools, put admin access and private chat … Read more
A notorious cybercrime gang, known as Golden Chickens, has resurfaced with an arsenal of four new malware families and modular implants designed to evade detection by even the most advanced security systems. The group’s latest efforts demonstrate a disturbing trend in the evolution of cyber threats, where attackers are increasingly leveraging artificial intelligence (AI) and … Read more
A shocking incident at the Thai Finance Ministry has exposed the vulnerability of relying on artificial intelligence (AI) for security, after it was revealed that an unattended AI agent, Hermes, was used by a hacker to carry out post-exploitation activities. The breach is a stark reminder of the dangers of entrusting sensitive systems to autonomous … Read more
Cybersecurity teams are being outsmarted by AI agents that can identify software vulnerabilities with ease, but mere visibility into these threats is not enough to keep organizations safe. What’s needed instead is proactive enforcement of what these AI-powered systems can do, to prevent exploitation and minimize damage. The rapid advancement of artificial intelligence in cybersecurity … Read more
Critical Vulnerability in OpenAI’s ChatGPT Workspace Agents Exposed A shocking flaw in OpenAI’s ChatGPT Workspace Agents, dubbed AgentForger by researchers, has left organizations vulnerable to a sophisticated attack that can turn an unsuspecting employee into a remote-controlled AI insider. The vulnerability, which was discovered and disclosed by Zenity Labs, allows attackers to create a powerful … Read more
Australia’s energy giant Origin Energy Limited has confirmed that it suffered a massive data breach, with hackers claiming to have accessed the sensitive information of millions of customers. The breach, which was first reported on July 22, has left an estimated 2 million individuals’ personal data exposed. Origin Energy is one of Australia’s largest electricity … Read more
Europe’s Multilingual Reality Exposes AI Security Gaps, Putting Organizations at Risk A stark reality has emerged in the world of artificial intelligence (AI) security: not all languages are treated equally when it comes to model function and safety. For organizations operating across Europe, this means a heightened risk of AI-related security breaches, particularly when dealing … Read more
Clop Ransomware Gang Targets PTC Windchill and FlexPLM in Sophisticated Data Theft Attacks A highly sophisticated cybercrime group, Clop, has launched a new wave of attacks targeting companies that use PTC Windchill and FlexPLM, enterprise software platforms used for managing complex products from design to manufacturing. The gang is exploiting a critical vulnerability, CVE-2026-12569, to … Read more
A Sneaky Notepad++ Plugin Exposes Users to Sophisticated Ransomware Attacks Cybersecurity researchers have uncovered a disturbing trend in which a fake plugin for popular text editor Notepad++ is being used to deliver the highly potent MATCHBOIL.V2 ransomware. The campaign, dubbed UAC-0099 by experts, has already compromised numerous systems worldwide, with victims reporting devastating losses. At … Read more