CyberNews Kimsuky’s Stealthy Offline AI Stack Exposes Millions to Phishing and Malware Attacks A sophisticated cyber threat actor group, Kimsuky, has been building an offline artificial intelligence (AI) stack that enables them to boost phishing attacks and automate malware development. This disturbing capability puts millions of individuals at risk, highlighting the evolving nature of cyber threats. … Read more
Metabase Patches Critical SQL Injection Vulnerability Exploited in Wild A critical-severity SQL injection vulnerability in Metabase’s data analytics solutions has been exploited by attackers as a zero-day, allowing them to gain administrative access and steal sensitive data. The company has released urgent patches for the flaw, which affects multiple versions of its software. The vulnerability … Read more
The US Water Sector Under Siege: Cyberattacks Hit at Least 12 States, Raising Concerns Over Public Safety A growing number of states across the country are coming forward to confirm that their water and wastewater facilities have been targeted in a coordinated hacking campaign. At least 12 states have reportedly been affected, with New Jersey … Read more
Critical Progress LoadMaster Flaw Exposed to Hackers Worldwide A severe security vulnerability in the popular Application Delivery Controller (ADC) and server load balancer, Kemp LoadMaster, has been actively exploited by hackers. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that this critical command injection flaw can allow unauthenticated attackers to execute arbitrary commands … Read more
Steam Hardware Customers Hit by Data Breach After CEVA Logistics Hacking Valve, the company behind the popular digital distribution platform Steam, is notifying its hardware customers in Europe that their data has been stolen following a hacking incident at its shipping partner, CEVA Logistics. The breach has exposed sensitive information, including names, addresses, phone numbers, … Read more
LexisNexis Shuts Down Services Amid Suspicious Activity on Third-Party Servers Global data analytics company LexisNexis has taken its Diligence, Metabase API, and Newsdesk services offline as a precautionary measure after detecting unusual activity on servers hosted by an unnamed third-party vendor. The move is part of the company’s response to the incident, which includes investigating … Read more
Levi Strauss & Co Hit by Cyberattack, Corporate Data Stolen from Employee Computers In a disturbing revelation, denim giant Levi Strauss & Co has disclosed that it suffered a cyberattack earlier this week, resulting in the theft of corporate data from employee computers. The incident, which was caused by social engineering tactics, highlights the ongoing … Read more
Critical LoadMaster Vulnerability Exploited in the Wild, CISA Warns of Immediate Patching The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a urgent warning to federal agencies to patch a critical vulnerability in Progress Kemp LoadMaster that has been actively exploited by attackers. The flaw, tracked as CVE-2026-8037 with a CVSS score of 9.6, … Read more
Polish Energy Facility Sabotaged by Sophisticated Hackers, Raising Concerns About Grid Vulnerability A disturbing trend is emerging in Poland’s energy sector as a second attack on an industrial control system (ICS) facility has been discovered. The hackers’ goal was “purely destructive,” targeting grid safety and stability monitoring systems to cause significant disruption. This latest incident … Read more
Critical Progress LoadMaster Flaw Now Being Exploited in Real-World Attacks A critical vulnerability in Progress Kemp LoadMaster, a popular Application Delivery Controller (ADC) and server load balancer used by tech giants and government agencies worldwide, is being actively exploited by hackers. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning, advising … Read more