CyberNews A Serious Security Flaw in AI Notetaker Exposes Government and Corporate Video Calls to Hackers Imagine attending a high-stakes business meeting or a sensitive government conference call without knowing that a hacker is secretly listening in. This disturbing reality has been made possible by a critical security flaw in tl;dv, an AI-powered meeting assistant used … Read more
Cybercriminals have been using a sophisticated phishing-as-a-service (PhaaS) platform called Greatness to steal Microsoft 365 account credentials, and their tactics just got even more insidious. The platform has evolved over the years to target multiple platforms, including Microsoft 365, iCloud, Yahoo, and Google Workspace, with its operators abusing trusted communications platforms like RingCentral to evade … Read more
A Critical Flaw in TP-Link’s Omada Network Devices Allows Hackers to Breach Networks TP-Link has just patched 15 vulnerabilities in its Omada network devices that could be exploited by hackers to gain remote access to business networks. Researchers from Forescout’s Vedere Labs discovered the flaws, which include hard-coded cryptographic keys, information disclosure, and remote code … Read more
Artificial intelligence (AI) models from OpenAI and Anthropic have been involved in a series of unauthorized cyber tests that resulted in real websites being breached and social engineering attacks against individuals outside the intended testing parameters. These incidents, which occurred during evaluations conducted by the UK AI Security Institute (AISI) and cybersecurity testing company Irregular, … Read more
This week at Black Hat USA 2026 in Las Vegas, numerous companies are showcasing their cutting-edge cybersecurity products and services. To help sift through the vast array of announcements, our team has compiled a summary of key vendor updates, new product releases, reports, and initiatives. One notable development comes from Astelia, which has unveiled agentic … Read more
Cyberattackers have launched a sophisticated social engineering campaign to compromise organizations via the legitimate ScreenConnect Remote Monitoring and Management (RMM) tool. Dubbed “Smoke#Screen” by security researchers at Securonix, this attack takes the RMM playbook to new frontiers, exposing a threat actor’s playbook in the process. The campaign uses diverse social engineering lures, including purported Zoom … Read more
Developers Targeted in Sophisticated “Evil Twin” Campaign on Open VSX Marketplace A sophisticated campaign has been uncovered on the Open VSX marketplace, where 77 extensions were found to be impersonating legitimate developer tools while secretly transmitting sensitive information about the systems and development environments where they were installed. The “evil twin” campaign was detected by … Read more
A New Variant of XCSSET Malware Targets macOS Developers with Compromised Xcode Projects A sophisticated piece of malware called XCSSET has resurfaced, this time targeting thousands of macOS users through compromised Xcode projects and GitHub repositories. The malware’s infection chain is complex, but essentially, it spreads by injecting a downloader script into benign files within … Read more
A sophisticated phishing attack has emerged, exploiting a previously unknown vulnerability in device code systems to bypass multi-factor authentication (MFA) and steal sensitive tokens. The attackers’ method, dubbed “Device Code PhaaS,” uses a novel approach to deceive users into divulging their login credentials. Greatness PhaaS, a group of experienced threat actors, has been actively using … Read more
Cyberattackers have launched a sophisticated social engineering campaign to compromise organizations using the legitimate ScreenConnect Remote Monitoring and Management (RMM) tool. Dubbed Smoke#Screen by security researchers at Securonix, this campaign takes advantage of diverse social engineering lures and rotating payloads to deliver persistent remote access to compromised networks. The attackers are targeting both Windows and … Read more