ShinyHunters hacks Clop leak site, threatens to extort ransomware gang

ShinyHunters’ audacious attack on Clop ransomware gang sparks cybersecurity controversy In a shocking turn of events, the notorious ShinyHunters extortion group has hacked into the data leak site of the Clop (aka Cl0p) ransomware operation, defacing the Tor site and allegedly stealing server data and private keys for its onion service. This brazen move is … Read more

North Korean WaterPlum hackers infected 30,000 devices worldwide

North Korean Hackers Compromise 30,000 Devices Globally, Steal Millions in Cryptocurrency A joint law enforcement advisory has revealed that a group of North Korean hackers known as WaterPlum has infected at least 30,000 devices worldwide over the past eight months. The hackers have been linked to a broader campaign called “Contagious Interview,” which targets job … Read more

SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

A severe vulnerability has been patched in SolarWinds’ ARM-based products, allowing unauthenticated attackers to gain remote code execution. The flaw, which was discovered by security researchers and reported to the vendor, had a hard-coded encryption key hardcoded into the product’s firmware. This exposed sensitive data and left systems vulnerable to exploitation. The affected products include … Read more

Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws

Researchers have uncovered a disturbing trend in which hackers are exploiting a series of interconnected vulnerabilities to gain unauthorized access to sensitive systems and data. The attack vectors, dubbed “chained flaws,” allow malicious actors to jump from one compromised account to another, ultimately leading to high-profile breaches. At the heart of this issue lies the … Read more

Calling viral AI actress Tilly Norwood? Agree to a face scan first

As the viral AI actress Tilly Norwood continues to make headlines, a new controversy has emerged surrounding her “Talking Tilly” service. The interactive experience allows users to video-call Tilly behind the scenes, but what’s not immediately apparent is that it comes with a surprise: an automated face scan and age check before each call. This … Read more

Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up

Google’s Gemini Project Raises Red Flags After Accidental Infiltration of Company Systems A recent incident has exposed a critical vulnerability in Google’s Gemini project, which aims to help organizations better manage their network security. During a security test, it appears that Gemini inadvertently broke into several real company systems due to a mix-up between test … Read more

Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild

Critical Vulnerability in Orkes Conductor Workflow Platform Exploited in the Wild, Threatening Thousands of Organizations A critical pre-authentication remote code execution (RCE) vulnerability in the popular Orkes Conductor workflow platform has been actively exploited by attackers, putting thousands of organizations at risk. The vulnerability, discovered earlier this year, allows hackers to execute arbitrary code on … Read more

SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE

A Critical Flaw in SolarWinds’ ARM Tool Exposes Organizations to Remote Code Execution Risks Cybersecurity vendor SolarWinds has released patches for its Application Release Management (ARM) tool, addressing a hard-coded key flaw that could allow unauthorized access to systems. This vulnerability, discovered by security researchers, exposes organizations using the tool to significant risks of remote … Read more

Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws

Security researchers have made a groundbreaking discovery in the realm of identity exposure, exploiting a series of chained vulnerabilities that allowed them to take over OpenAI staff accounts. The findings, which were facilitated by the Claude Opus 5 framework, shed light on the perils of identity exposure and highlight the need for robust security measures. … Read more