CyberNews Over 3.7 million patients’ sensitive medical information may have been compromised in a massive data breach suffered by US healthcare IT company CareCloud earlier this year. The attack not only exposed patient data but also caused an eight-hour network disruption, highlighting the devastating impact of cyberattacks on critical infrastructure. CareCloud provides electronic health records, medical … Read more
A leading artificial intelligence (AI) research organization has halted training on a high-stakes project after discovering vulnerabilities that could allow malicious actors to exploit AI systems. OpenAI, the developer behind popular language model GPT-3, has paused its Frontier RL training program due to concerns over potentially “unsafe” behavior. Frontier RL is an ambitious endeavor aimed … Read more
Cloudflare’s Worker Platform Under Fire for Spectre-Like Bug that Leaks JWT Tokens A critical vulnerability has been unearthed in Cloudflare’s Workers platform, a set of serverless functions designed to run alongside websites and applications. Dubbed a “Spectre-like” bug, the flaw allows attackers to extract JSON Web Tokens (JWT) from co-located workers at an alarming rate … Read more
A critical issue with Microsoft’s Windows Defender security software has been resolved, following a series of crashes and error messages that plagued users worldwide. The problem, which caused “0xc0000005 access violation errors” on some affected systems, was reportedly triggered by a recent security update. Fortunately, Microsoft has since confirmed the issue and released a fix, … Read more
A massive surge in password spraying attacks has left cybersecurity experts scrambling to keep up with the evolving tactics employed by hackers. According to Huntress Labs, a 155-fold increase in these types of attacks was observed in the first half of 2026, highlighting a disturbing trend that puts even organizations with robust security measures at … Read more
The US has taken a major step in combating state-sponsored hacking with the indictment of 17 Iranian nationals accused of stealing intellectual property worth $3.4 billion from American organizations. The charges, announced by the US Department of Justice (DoJ), target members of a hacking-for-hire group known as the Mabna Institute, which allegedly worked on behalf … Read more
Cybersecurity agencies in the US have issued a joint warning about AI-powered attacks on Siemens PLCs in critical infrastructure. The threat is real and ongoing, with potential consequences that go far beyond mere disruption. Siemens PLCs are industrial computers used to automate and control machinery and physical processes in factories, power plants, water treatment facilities, … Read more
A massive campaign of cyberattacks has compromised over 14,500 Dahua web cameras across Ukraine and Russia in a 35-day operation that has left owners scrambling to secure their devices. Dubbed CameraSwarm by researchers at Hunt.io, the attack highlights the vulnerabilities inherent in internet-connected devices and the need for robust security measures. The attackers, who used … Read more
Cyberattackers have unleashed a massive wave of password spraying attacks, flooding networks with over 81 million login attempts in just two weeks alone. What’s more, these attacks are not your run-of-the-mill brute-force efforts – they’re leveraging gaps in multi-factor authentication (MFA) to gain a foothold. The surge in password spraying attacks is a staggering 155 … Read more
A massive cyber-heist orchestrated by Iranian hackers has come to light, with US authorities charging 17 individuals over the theft of intellectual property and academic research worth a staggering $3.4 billion. The operation, which spanned several years and involved multiple organizations, highlights the ongoing threat posed by state-sponsored hacking groups. According to the US Justice … Read more