CyberNews Agentic AI’s Identity Problem Leaves Organizations Vulnerable to Attackers A growing concern in the cybersecurity community is the lack of proper identity management for artificial intelligence (AI) agents, which are increasingly being used across various industries. These digital actors authenticate, receive permissions, and take actions on behalf of organizations, often with credentials and access that … Read more
The U.S. government is taking a bold step in its fight against cyberattacks by offering up to $10 million for information that can help identify or locate members of two Russian-backed hacker groups targeting WhatsApp and Signal users. The bounty is part of the “Rewards for Justice” (RFJ) program, which specifically targets foreign state actors … Read more
A massive number of DCloud Uni-App websites have been compromised, enabling scammers to set up fake cryptocurrency trading platforms and phishing sites that drain users’ digital wallets. According to recent findings, over 236,000 such sites were discovered, with many more suspected to be in operation. The compromised websites are likely the result of vulnerabilities in … Read more
As AI-powered tools increasingly become essential components of cybersecurity arsenals, new research has shed light on their ability to discover previously unknown vulnerabilities in software code at an unprecedented rate. This trend raises alarm bells for organizations worldwide, emphasizing the need for proactive measures to prevent exploitation by malicious actors. The breakthroughs are attributed to … Read more
Agentic AI’s Identity Crisis Exposes Organizations to Cyber Threats A growing concern in the cybersecurity community is that agentic artificial intelligence (AI) systems, which can authenticate, receive permissions, and take actions across production environments, are often given broad access with little oversight. This identity crisis has caught many organizations off guard, leaving them vulnerable to … Read more
A highly sophisticated cyber threat group, Gamaredon, has significantly expanded its malicious activities in Ukraine with the introduction of new malware and exploitation of cloud services. The attacks have targeted various organizations across the country, including government institutions, non-governmental organizations (NGOs), and private companies. Gamaredon’s tactics have evolved to incorporate advanced techniques, making it increasingly … Read more
A new threat is emerging on the horizon, one that could potentially compromise even the most secure networks and systems. Post-quantum cryptography, designed to withstand the powerful computers of tomorrow, may seem like an esoteric concern for everyday users. But the truth is, it’s already having a profound impact on how we approach security. The … Read more
A staggering 236,000 websites using DCloud’s Uni-App platform have been compromised in a massive-scale crypto scam and phishing operation, with hackers exploiting vulnerabilities to drain user wallets. The affected sites, which include online shopping platforms, social media outlets, and even charity organizations, are now being used to spread malware, phish sensitive information, and perpetuate wallet … Read more
As researchers continue to explore the dark side of artificial intelligence, two recent breakthroughs have shed light on the alarming potential for AI-powered malware and Linux kernel vulnerabilities that put millions of users at risk. The discovery of a new wave of software flaws, uncovered by advanced machine learning models, has left security experts scrambling … Read more
A recently disclosed Linux kernel vulnerability, tracked as CVE-2026-43503 and referred to as DirtyClone, has been found to allow any local user to gain root privileges on affected systems. The flaw was discovered by security researchers at JFrog, who have published technical details and a proof of concept (PoC) targeting the issue. The vulnerability exists … Read more