Cyber Security

Cybersecurity agencies have been sounding the alarm about a growing threat landscape, and the latest development from CISA only adds to the urgency. In a significant move, the Cybersecurity and Infrastructure Security Agency has added five actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, which includes flaws in Artifactory, ScreenConnect, and RouterOS software. … Read more

A new wave of high-severity vulnerabilities has been added to the Cybersecurity and Infrastructure Security Agency’s (CISA) Known Exploited Vulnerabilities (KEV) catalog, with five fresh entries for Artifactory, ScreenConnect, and RouterOS. These flaws have been actively exploited in the wild, putting countless organizations at risk of cyber attacks. The KEV catalog is a critical resource … Read more

Critical Check Point VPN Flaws Pose Imminent Threat to Businesses A warning has been issued by the Dutch Nationaal Cyber Security Centrum (NCSC) that two critical vulnerabilities in Check Point’s Virtual Private Network (VPN) solution are about to be exploited. The flaws, tracked as CVE-2026-85102 and CVE-2026-85103, have already prompted Check Point to release patches, … Read more

Cybersecurity threat actors have taken their attacks to the next level with a sophisticated scheme that leverages artificial intelligence (AI) agents to harvest, validate, and consolidate access to Large Language Models (LLMs). This “self-expanding” inference supply chain is a worrying development that highlights the evolving nature of cyber threats. At its core, this operation involves … Read more

Critical Flaws in GitLab Platform Expose Users to Remote Attacks, Patches Released Amid Growing Probes GitLab’s software development platform has been hit with two high-severity flaws, one of which holds the highest possible severity score. The company has rushed out emergency patches for both issues, but a security firm has already spotted attackers probing the … Read more

As airlines continue to navigate the challenges of cybersecurity threats, passengers may soon find themselves without a safety net when flights are delayed or canceled due to cyberattacks. Starting next month, the US Department of Transportation (DOT) will give airlines clearance to not provide meal vouchers or hotel accommodations in such cases, provided they can … Read more

Critical Flaws in Check Point VPN Leave Systems Vulnerable to Attack A warning from the Dutch Nationaal Cyber Security Centrum (NCSC) has sent shockwaves through the cybersecurity community, as two critical flaws in Check Point’s Virtual Private Network (VPN) solution are poised for imminent exploitation. The agency is urging organizations to install security updates addressing … Read more

Cybersecurity researchers have uncovered a sophisticated and self-expanding supply chain attack that leverages artificial intelligence (AI) agents to harvest, validate, and consolidate access to Large Language Model (LLM) inference capacity. The operation, which we’ll refer to as an “inference supply chain,” has the potential to significantly impact organizations relying on LLMs for a range of … Read more

GitLab’s Critical Flaw Already Under Attack, Patches Urged for Immediate Upgrade A high-severity vulnerability in GitLab’s software development platform has left it wide open to potential attacks, with a security firm already detecting probes against the flaw. The company has released emergency patches for two critical flaws, one of which holds the highest possible severity … Read more

A Highly Sophisticated Exploit Kit is Being Rapidly Deployed by Multiple Espionage Groups A new exploit kit called BlueMoon has been discovered being used by multiple espionage groups to target organizations in various industries, including aerospace, government, and finance. This kit is particularly concerning due to its ability to chain together three previously unpatched vulnerabilities: … Read more