CyberNews A Trio of Threats Exposed: Ransomware Affiliate Pleads Guilty, QuimaRAT Spreads Across Platforms, and More A spate of disturbing cybersecurity incidents has come to light in recent days, showcasing the ever-evolving tactics employed by threat actors. From a ransomware affiliate’s guilty plea to a subscription-based remote access trojan (RAT) platform being advertised on dark web … Read more
Cybersecurity researchers have uncovered a sophisticated attack vector that exploits a review gap in AI-assisted code review processes. Dubbed “Ghostcommit,” this malicious technique conceals prompt injection instructions within images, allowing attackers to steal sensitive information from repositories without raising suspicion. The attack works by embedding the malicious instruction inside a PNG image file, which is … Read more
A US Cybersecurity Expert Sentenced to 70 Months in Prison for Helping Ransomware Gang Angelo Martino, a 41-year-old cybersecurity expert from Florida, has been sentenced to 70 months in prison after pleading guilty to charges of helping a ransomware gang while working as a negotiator. This is the third high-profile case in recent years where … Read more
DHS Database Hacked, Adobe Boosts Patch Cadence, and More: A Week in Cybersecurity Review In what’s being described as one of the most significant cybersecurity events this year, a top official at the US Department of Homeland Security (DHS) has pleaded guilty to charges related to ransomware attacks. Karen Serobovich Vardanyan, a 34-year-old Armenian national, … Read more
AI coding tools have revolutionized software development in recent years, promising to boost productivity and efficiency. However, as organizations increasingly rely on these tools, security risks are emerging that may outweigh the benefits of AI-generated code. A growing body of research suggests that AI-coded applications are vulnerable to a range of issues, from OWASP Top … Read more
Social media platforms are facing increasing pressure from governments around the world to restrict or ban minors’ access to their services. In recent months, several countries have introduced laws aimed at protecting children’s mental health and safety online, with some platforms already feeling the heat. Australia was the first country to introduce a law restricting … Read more
A critical vulnerability in Zimbra, an email server software used by millions worldwide, could allow attackers to execute malicious code within user sessions via specially crafted emails. The flaw, which affects versions 9.0 and earlier of the software, has been disclosed by researchers at Sanguine Security. Zimbra is a popular choice for businesses and organizations … Read more
AI Coding Tools Pose Hidden Security Risks Despite Productivity Gains A growing number of organizations are embracing AI coding tools to boost productivity and streamline software development workflows. However, these tools come with a price – and not just in terms of hefty subscription fees. According to various studies, the use of AI-generated code also … Read more
As governments around the world scramble to protect children from the perceived risks of social media, a growing number of countries are introducing laws that ban or severely restrict access to popular platforms for users under 16. Australia was the first to take this step, followed by Canada, the UK, and several US states, including … Read more
A Critical Vulnerability in ATM Security Software Raises Concerns Over Jackpotting Attacks Researchers have discovered a set of nine vulnerabilities in CryptWare CryptoPro Secure Disk, a full-disk encryption and pre-boot authentication solution used by both corporations and ATM manufacturers. The security flaws, revealed by principal researcher Matt Burch at the Black Hat USA 2026 conference, … Read more