Cyber Security

Recent SonicWall Vulnerabilities Exploited in Ransomware Attacks A sophisticated ransomware gang has been exploiting two newly discovered vulnerabilities in SonicWall’s SMA1000 secure remote access appliances. The INC Ransomware group has been targeting organizations across the globe, including government and private sector entities in the US, Australia, UAE, Colombia, and Switzerland. The attack chain involves unauthenticated … Read more

A Devastating Data Breach Hits Brinks Home, Exposing Millions to Potential Identity Theft Brinks Home, a leading provider of home security systems, has fallen victim to a major data breach. The company’s IT systems were compromised by hackers who have since leaked over 41 gigabytes of sensitive information online. This alarming incident highlights the risks … Read more

Thermo Fisher’s Critical Patch Aims to Plug Hole in DNA Data Integrity In a move that underscores the importance of robust cybersecurity practices, Thermo Fisher Scientific has issued a patch for a flaw that could have enabled virtually undetectable tampering with genetic data. The vulnerability affects various DNA analysis tools and services offered by the … Read more

A recent breach of the Police National Database (PNLD) has exposed sensitive contact details for thousands of U.K. police officers and government officials, putting them at risk of targeted harassment or even physical harm. The compromised data includes phone numbers, email addresses, and home addresses, all of which have been uploaded to the dark web. … Read more

A sophisticated Chinese threat actor has been using a leaked DarkSword exploit kit to deploy a notorious malware variant, GHOSTBLADE, on iOS devices. The attack vector targets iPhone and iPad users, compromising their sensitive data and potentially paving the way for further malicious activities. The DarkSword exploit kit, initially designed to target Android devices, has … Read more

A New Era of Cyberattacks: How AI Has Become Both a Weapon and a Target The cybersecurity landscape has taken a drastic turn in recent times. Artificial intelligence (AI) was initially touted as a game-changer for defenders, helping to identify and mitigate threats more efficiently than human analysts alone. However, a new report from CrowdStrike … Read more

A Critical Flaw in Hugging Face Diffusers Exposes Model Repositories to Code Execution Risks A vulnerability has been discovered in the popular Hugging Face Diffusers library, a widely-used tool for building and deploying AI models. The flaw, disclosed on August 3rd, could allow attackers to inject malicious code into model repositories, potentially leading to arbitrary … Read more

A Critical Vulnerability in N-central Servers Exposes Thousands of Businesses to Attackers N-central, a cloud-based IT management platform used by thousands of businesses worldwide, has been compromised by attackers who have taken control of its servers despite an initial fix being implemented. The incident highlights the importance of thorough security patching and the need for … Read more

As AI-powered systems become increasingly ubiquitous in the digital landscape, they’re also becoming a double-edged sword in the world of cybersecurity. According to CrowdStrike’s latest threat hunting report, AI-driven behaviors have surpassed human-triggered incidents as the primary source of potential malicious activity detected by the company’s systems. This alarming trend highlights the need for organizations … Read more

A critical vulnerability in Hugging Face’s Diffusers library has left millions of users exposed, potentially allowing attackers to execute arbitrary code on model repositories. The flaw, discovered by a researcher at MIT, could have severe consequences for organizations relying on these libraries for natural language processing and computer vision tasks. The issue stems from a … Read more