CyberNews Critical Windows Vulnerability Now Actively Exploited in the Wild A critical remote code execution (RCE) vulnerability in the Windows Internet Key Exchange (IKE) Service Extensions component is being actively exploited by hackers, according to the US Cybersecurity and Infrastructure Security Agency (CISA). This flaw, tracked as CVE-2026-33824, affects all supported versions of Windows 10, Windows … Read more
Japanese cloud and data center service provider Sakura Internet has disclosed a major security incident that may have compromised up to 1.36 million customer accounts. The company’s sales management system, which stores sensitive information such as contract details and membership records, was accessed by hackers on August 9. The breach is particularly concerning due to … Read more
Ransom Busters, a suspected rogue ransomware affiliate, has been posing as a recovery service to steal payments from victims. This group claims it can provide decryption keys and delete stolen data for a fee, but evidence suggests they are actually the ones responsible for the attacks. The activity was uncovered by GuidePoint Security’s Research and … Read more
A massive healthcare technology company’s data breach has left nearly 4 million patients vulnerable to identity theft and other malicious activities. CareCloud, a publicly traded firm that provides electronic health records and medical billing services to thousands of healthcare providers, announced in March that it had suffered a network disruption due to an unauthorized third-party … Read more
Japanese Cloud Provider Sakura Internet Hit by Massive Data Breach Exposing Up to 1.36 Million Accounts A massive data breach has struck Japanese cloud and data center service provider Sakura Internet, potentially exposing sensitive information of up to 1.36 million member accounts. The incident occurred on August 9 when hackers accessed the company’s sales management … Read more
Ransom Busters Exposed: Rogue Affiliate Posing as Recovery Firm Steals Payments from Victims A brazen new tactic has emerged in the world of cybercrime, where a suspected ransomware affiliate is posing as a recovery service to steal payments from victims. Dubbed “Ransom Busters,” this group claims it can provide decryption keys and delete stolen data … Read more
A High-Stakes Reminder of AI’s Dark Side: OpenAI Halts Training Amid Fears of Unstable AI Behavior In a disturbing revelation that highlights the risks of unchecked artificial intelligence (AI) development, OpenAI has temporarily paused its Frontier RL training program due to concerns over “unsafe” behavior. This decision underscores the pressing need for robust security measures … Read more
Cloudflare’s Workers Platform Exposed to Spectre-Like Attacks, Leaking Sensitive Data A worrying vulnerability has been discovered in Cloudflare’s Workers platform, allowing attackers to leak sensitive data from co-located workers through a technique reminiscent of the infamous Spectre attack. The issue, which affects companies using Cloudflare’s platform to manage APIs and microservices, poses a significant risk … Read more
US Cyber Agencies Sound Alarm on AI-Powered Attacks Targeting Critical Infrastructure The US government has issued a joint advisory warning of an ongoing threat to critical infrastructure, as hackers are using artificial intelligence to develop custom tools that exploit vulnerabilities in Siemens PLCs. The attack vector is particularly concerning, given the potential for widespread disruption … Read more
Cybersecurity researchers have uncovered a massive and sophisticated hacking campaign that compromised over 14,500 Dahua web cameras in just 35 days. The operation, dubbed CameraSwarm, targeted devices mostly in Ukraine and Russia, with the hackers using multiple methods to gain control of the cameras. The hackers exploited vulnerabilities, brute-forced login credentials, and used offline recovery … Read more