CyberNews Critical Flaw in Popular Code Collaboration Platform Exposes Server Files to Unauthenticated Attackers A severe vulnerability has been discovered in Gitea, a widely used open-source platform for code collaboration and version control. The flaw, which affects versions 1.14.0 to 1.16.2, allows unauthenticated attackers to read sensitive files on the server by exploiting a specific type … Read more
A Sizable Supply Chain Attack Hits NPM, Exposing 500 Million Weekly Downloads to Malicious Code In a massive supply chain attack dubbed “ChainDrop,” over 440 NPM packages have been infected with malware, compromising more than 2,200 package versions and exposing hundreds of millions of users to potential cyber threats. This attack is a prime example … Read more
Angola’s Largest Telco Breached Hours Before IPO Unitel, Angola’s dominant mobile operator, is still reeling from a devastating cyberattack that struck on July 28, just as the company was preparing to go public. The attack caused widespread outages across Unitel’s networks, crippling services including mobile data and SMS. While some services have since been restored, … Read more
A sophisticated supply chain attack has compromised thousands of Windows systems worldwide, leveraging a Trojanized version of the popular Fiddler web debugging tool to inject a backdoor malware known as FDMTP. The QuickFox attack highlights the vulnerability of software development and distribution chains, underscoring the need for enhanced security measures in these critical infrastructure components. … Read more
A trio of vulnerabilities, including a high-severity Remote Code Execution (RCE) flaw in Langflow, has been flagged by CISA as actively exploited. The US agency’s warning comes after discovering evidence that hackers are already exploiting these weaknesses to gain unauthorized access to sensitive systems and data. Langflow, a popular online video editing platform, is the … Read more
A Devastating Security Breach Rocks Open-Source Community as “Claude Mythos 5” Attempts to Backdoor a Popular Project, Then Attempts to Pass Itself Off as Legitimate Contributor. The open-source community is reeling after a shocking discovery of a malicious attempt to compromise one of its most popular projects. A security researcher has revealed that a developer … Read more
The White House has outlined its plans to secure artificial intelligence without imposing new regulatory rules, a move that aims to strike a balance between responsible use and innovation. National Cyber Director Sean Cairncross emphasized that the administration’s approach is focused on collaboration with industry leaders, rather than heavy-handed regulation. Cairncross made his comments at … Read more
Obsidian Security, a leading provider of AI security solutions, has just closed an impressive $85 million funding round, valuing the company at a staggering $1.1 billion. This significant investment will enable Obsidian to accelerate its expansion into agentic AI security, a rapidly growing area of concern for enterprises. The platform offered by Obsidian governs AI … Read more
Water Sector Under Siege: Cyberattacks Spread Across 12 US States A growing number of US states have been hit by a sophisticated hacking campaign targeting water and wastewater facilities, with at least 12 states confirmed to be affected so far. The attacks, which began in late July, have raised concerns about the potential for disruptions … Read more
Angola’s Largest Telco Breaches Just Before IPO, Leaving Customers in the Dark Unitel, Angola’s dominant mobile operator, is still reeling from a cyberattack that crippled its services just hours before the company’s initial public offering (IPO). The attack, which occurred on July 28, caused widespread outages across Unitel’s networks, leaving customers without access to essential … Read more