CyberNews US Army Websites Defaced with Pro-Kurdish Sentiments and Insults to Trump Multiple US Army internet subdomains have been defaced in a sophisticated cyber attack, displaying pro-Kurdish sentiments and insulting messages towards President Donald Trump and United States Ambassador to Türkiye Tom Barrack. The incident highlights the vulnerability of military websites to cyber threats and raises … Read more
US Army Websites Defaced with Pro-Kurdish Sentiments and Insults to Trump The US Army’s online presence has been compromised in a brazen display of cyber vandalism, as multiple subdomains were defaced with pro-Kurdish sentiments and insults directed at President Donald Trump. The incident, which was first reported by independent cybersecurity researcher Ronald Lovelace, highlights the … Read more
A newly disclosed Linux vulnerability, dubbed “Bad Epoll,” has made its way into the public sphere with a proof-of-concept (PoC) exploit that could grant unprivileged processes root access on desktops, servers, and even Android phones. The bug, assigned a CVSS score of 7.8 and tracked as CVE-2026-46242, exploits a race-condition use-after-free issue in the Linux … Read more
North Korean Hackers Launch Widespread Supply Chain Attacks on Open Source Developers A sophisticated campaign by North Korean hackers has been targeting open source software developers across various platforms, compromising their repositories and injecting malicious code into legitimate packages. The operation, referred to as PolinRider, is part of a broader supply chain attack that has … Read more
A Sophisticated Threat Actor Targets Government and Electric Power Organizations Worldwide A highly skilled threat actor, dubbed Armored Likho, has been identified as targeting government and electric power organizations in multiple countries. According to Kaspersky, this advanced persistent threat (APT) group engages in financially motivated attacks against individuals and cyber-espionage operations against organizations in Russia, … Read more
**A New Approach to Risk Management: Connecting the Dots Between Threats and Business Impact** In today’s fast-paced business environment, risk management is no longer a one-time exercise, but an ongoing process that requires a deeper understanding of the interconnectedness between threats, assets, and business operations. The traditional approach to risk assessment has its limitations, particularly … Read more
Threat actors have been using sophisticated prompt injection attacks to trick AI agents into making cryptocurrency payments or trusting fraudulent platforms. These attacks involve embedding malicious code in websites and manipulated search results that instruct AI agents to perform specific actions, often with devastating consequences. Zscaler, a cybersecurity firm, has identified two campaigns relying on … Read more
Sophisticated Malware Framework Uses Blogspot to Deliver Information Stealers A highly advanced malware delivery framework has been uncovered by Securonix, which utilizes compromised websites and social engineering tactics to infect users with information stealers. Dubbed “Veil#Drop”, this framework combines JavaScript launchers and PowerShell download cradles to deploy and execute malware hosted on Blogspot, a trusted … Read more
Cybersecurity experts have long warned of a new era of cyberattacks driven by artificial intelligence (AI), and it appears that warning has finally come to pass. Researchers at Sysdig have discovered what they claim is the first documented case of an end-to-end ransomware operation executed autonomously by a large language model (LLM). Dubbed JadePuffer, this … Read more
A new memory disclosure flaw in Citrix’s NetScaler products has come under attack by threat actors, just days after a patch was released to address the issue. The vulnerability, known as CVE-2026-8451, affects NetScaler Application Delivery Controller (ADC) and Gateway devices configured as Security Assertion Markup Language (SAML) identity providers. Citix disclosed and patched the … Read more