CyberNews A critical zero-day vulnerability in GeoServer, a widely used open-source platform for geospatial data processing and sharing, has been exploited by hackers just hours after its public disclosure. According to attack surface management firm WatchTowr, threat actors have begun probing vulnerable systems using this unpatched security defect, which can be exploited to execute remote code … Read more
President Trump has signed a national security memorandum that paves the way for private sector companies to collaborate with law enforcement in carrying out hacking operations against transnational criminal organizations. The move marks a significant shift in how the government tackles cybercrime, and raises questions about the potential risks and benefits of involving private industry … Read more
As AI models continue to advance at breakneck speed, researchers are sounding the alarm about a concerning trend. The “middle class” of smaller AI models, often overlooked in favor of their more powerful and expensive counterparts, is rapidly improving its hacking capabilities. According to new research from XBOW, these mid-tier models are now capable of … Read more
A tech contractor’s insider attack on Brightly Software has resulted in a two-year prison sentence, highlighting the risks companies face when entrusting sensitive data to third-party contractors. Cameron Nicholas Curry, also known as “Loot,” exploited his access to the company’s network to steal corporate data and extort $7,540.92 from Brightly Software. Curry, who worked as … Read more
A Presidential Memo Sparks Fears of Abuses in Private Sector-Federal Law Enforcement Cyber Hacking Alliance The recent signing of a presidential memorandum by President Trump has left cybersecurity experts divided on its implications. The memo authorizes private sector companies to collaborate with federal law enforcement agencies in hacking operations against transnational criminal organizations, raising concerns … Read more
Apple has been sending out “Threat Notification” alerts to iPhone users over the past few days, warning them of potential mercenary spyware attacks. These notifications are not new, but they’re certainly alarming, especially for those who have received them. The alerts are part of a feature Apple introduced in 2021, which detects highly targeted mercenary … Read more
A New Era of Private Sector Involvement in Cyber Offense: What It Means for You and Your Business In a significant development that’s been making waves in cybersecurity circles, President Donald Trump has signed a national security memorandum that paves the way for private sector companies to play a larger role in helping law enforcement … Read more
As AI models continue to push the boundaries of what is possible in hacking and exploitation, a growing class of mid-tier models has emerged as a significant threat. Researchers at XBOW have found that these smaller models, often proprietary or open-source, are becoming increasingly capable of performing complex tasks, rivaling even the most advanced frontier … Read more
A Tech Contractor’s Elaborate Scheme Unravels: Insider Attack Exposes Dangers of Data Access and Extortion In a brazen insider attack, Cameron Nicholas Curry, a 27-year-old data analyst contractor for Brightly Software, was sentenced to two years in prison after stealing sensitive corporate data and extorting the company for $7,540.92. The case highlights the risks companies … Read more
A Presidential Memo’s Dubious Future in Cyber Warfare The recent signing of a presidential memorandum by Donald Trump has sparked intense debate among cybersecurity experts. The memo authorizes private sector companies to participate in federal law enforcement hacking operations against transnational criminal organizations, but its implications are far from clear-cut. For some, the move represents … Read more