MIND Secures $72 Million for AI-Powered DLP, Redefining Data Security in the Age of AI Cybersecurity startup MIND has just closed a whopping $72 million Series B funding round, bringing its total raised to a staggering $112 million. The investment will be used to accelerate platform development, expand into key enterprise markets, and scale the … Read more
A Critical Vulnerability in Orkes Conductor Exposed Organizations to Remote Attacks A severe vulnerability in the popular open-source framework Orkes Conductor has been exploited by attackers for several weeks, leaving many organizations vulnerable to remote code execution attacks. The flaw, tracked as CVE-2026-58138 with a CVSS score of 9.8, was patched in June but proof-of-concept … Read more
A massive supply chain attack has compromised over 100,000 websites by injecting malware through a customer engagement platform called Brevo. The attackers exploited a vulnerability in Brevo’s handling of security protocols to access hundreds of accounts, including one belonging to cryptocurrency storage provider Trezor, and used this access to deploy malicious code on multiple websites. … Read more
The NightmareStresser DDoS Service Has Been Disrupted in a Major International Operation In a significant blow to cybercrime, authorities have disrupted one of the world’s longest-running distributed denial-of-service (DDoS) for-hire services, NightmareStresser. The US Department of Justice announced this week that the FBI has seized the internet domains associated with the booter service, effectively putting … Read more
Microsoft has released patches to address 18 critical vulnerabilities across its cloud and artificial intelligence (AI) products, including Azure cloud services and Copilot-branded AI tools. These flaws could have allowed attackers to elevate privileges, disclose sensitive information, or even spoof legitimate Microsoft websites. The affected products include Azure ARC, Azure AI Foundry, Azure Logic Apps, … Read more
Brevo Supply Chain Attack Injects Malware into Over 100,000 Websites A sophisticated supply chain attack has compromised a popular customer engagement platform, injecting malware into more than 100,000 websites. Brevo, which provides services to businesses and individuals alike, was hacked through a vulnerability in its Single Sign-On (SSO) functionality, allowing attackers to access sensitive information … Read more
A major blow to cybercrime operations: NightmareStresser, a notorious distributed denial-of-service (DDoS) for-hire service, has been severely disrupted in an international operation led by the US Department of Justice. The FBI’s move marks a significant victory in the ongoing battle against online threats, with authorities seizing the internet domains associated with the booter service and … Read more
A devastating vulnerability in OpenAI’s sign-in system has been exposed, allowing hackers to gain access to employee ChatGPT and Codex accounts. The exploit was built using AI-powered tools and exploited a flaw in an image-processing library used by Discourse, the platform hosting OpenAI’s community forum. Hacktron, a security firm, discovered that uploading HEIC/HEIF photo files … Read more
A Ransomware Developer’s Downfall, AI-Driven Attacks on the Rise, and Critical SAP Flaw Exposed In a significant win for cybersecurity efforts, a Ukrainian IT specialist has been sentenced to nearly 13 years in prison by a Zurich court for developing ransomware used in extortion attacks on companies. The verdict marks a major milestone in the … Read more
A Growing Concern: OAuth Consent Abuse Exposes Organizations to Persistent SaaS Access Security teams have long relied on multifactor authentication (MFA) to protect against cyber threats. However, a growing concern is emerging that MFA alone may not be enough to prevent a specific type of attack known as OAuth consent abuse. This insidious threat allows … Read more