CyberNews A Sneaky Malware Campaign Exploits Dev Tools to Deliver Infostealer A sophisticated malware campaign has been discovered, leveraging popular development tools and package managers to infect software developers’ machines with an infostealer payload. The attackers have successfully hijacked numerous packages on npm and Go, exploiting the trust placed in these widely-used repositories. The malicious code … Read more
A massive cyberattack has been unfolding on the global internet backbone, threatening to disrupt online services and communication channels worldwide. The attack, which began over the weekend, has already compromised a significant number of routers and network devices, putting sensitive data at risk. The affected systems include some of the world’s most critical infrastructure, including … Read more
A Major DNS Spoofing Campaign is Underway, Affecting Millions of Users Worldwide A massive and sophisticated DNS spoofing campaign has been detected by security researchers at SANS ISC, targeting millions of internet users worldwide. The attackers are exploiting a well-known vulnerability in the Domain Name System (DNS) protocol to redirect victims to malicious websites, spreading … Read more
A massive data breach has exposed up to 14.2 million email logins at six Japanese internet service providers (ISPs), leaving customers vulnerable to account hijacks and other forms of cyber attacks. The incident, which was disclosed by KDDI Corporation on June 17, involves a vulnerability in an unnamed third-party software used by the company’s email … Read more
A New Version of YARA-X Brings Performance Boosts and Bug Fixes to Security Researchers Security researchers have been waiting for an update to the popular malware detection tool YARA-X, and it’s finally here. The latest versions, 1.18.0 and 1.19.0, bring significant improvements and bug fixes that will make a big difference in their daily work. … Read more
A massive data breach has compromised up to 14.2 million email logins at six internet service providers (ISPs) in Japan, highlighting the ongoing threat of cyber attacks against critical infrastructure and underscoring the importance of robust security measures. The incident, disclosed by Japanese telecommunications operator KDDI Corporation on June 28, involves a breach of one … Read more
A massive network of over 200,000 scam websites has been uncovered by cybersecurity firm Infoblox, all powered by a Chinese open-source framework called Uni-App. This framework is widely used in China for building legitimate applications and websites, but threat actors have exploited its popularity to create a sprawling ecosystem of investment scams that have already … Read more
The education sector is being forced to play catch-up in terms of cybersecurity, with rising threats from third-party actors putting student data at risk. Cybercriminals have long viewed the education sector as a lucrative target due to its mix of legacy technology and new applications, uneven IT resources, and vast amounts of sensitive data. According … Read more
A sophisticated new attack vector has been uncovered by Mozilla’s Zero Day Investigative Network (0DIN) AI security platform, which exploits vulnerabilities in popular agentic coding tools. The technique allows attackers to plant malware on a developer’s device without raising any red flags with security scanners or human reviewers. The attack relies on three seemingly innocuous … Read more
OpenAI’s latest iteration of its GPT language model, GPT-5.6 Sol, has been made available with restricted access and enhanced cyber safeguards. This breakthrough marks a significant step forward for AI-driven cybersecurity, but also raises concerns about the potential risks associated with advanced AI systems. The development of GPT-5.6 Sol is a testament to the rapid … Read more