A massive malware campaign, disguised as innocuous npm packages, has infected thousands of computers worldwide, transforming them into unwitting participants in a powerful DDoS botnet. The attack, which has been linked to a sophisticated AI-powered discovery process, has left security experts scrambling to understand the scope and implications of this unprecedented threat. The compromised software, … Read more
The US government has taken an unprecedented step in its fight against ransomware, slapping sanctions on a VPN service and a malware cryptor seller for their alleged role in supporting cybercrime operations. The move marks a significant escalation in the battle against online extortion gangs, which have been wreaking havoc globally. At the center of … Read more
The European Union has taken a decisive step against Russian cyber espionage, imposing sanctions on nine individuals and four entities accused of participating in a yearslong campaign to undermine EU governments and critical infrastructure. The move targets those responsible for a sprawling online spying network that has been active since 2010, with attacks detected in … Read more
Critical Vulnerability in Zimbra Collaboration Software Puts Users at Risk of Code Execution A severe vulnerability has been discovered in the popular collaboration software Zimbra, which could allow hackers to execute malicious code on users’ devices simply by sending a specially crafted email. The flaw affects the Classic Web Client and could potentially grant access … Read more
A critical vulnerability in RabbitMQ, a popular open-source message broker, has been discovered by cybersecurity firm Miggo. The flaw, tracked as CVE-2026-5721 (CVSS score of 8.7), allows attackers to obtain the broker’s confidential OAuth secret, potentially granting them access to sensitive data and systems. The vulnerability affects RabbitMQ instances where the administrator has set up … Read more
The Pentagon has put the brakes on its ambitious Cybersecurity Maturity Model Certification (CMMC) program, at least for now. The move comes as a welcome relief to small and non-traditional businesses that have been struggling to comply with the rigorous cybersecurity standards required by the framework. Under the CMMC, companies handling sensitive government information must … Read more
A year-long operation, linked to ShinyHunters, a notorious hacking collective, has compromised sensitive data from Salesforce customers worldwide. The breach, which began in August 2025 and continued until May of this year, allowed attackers to pilfer sensitive information through three distinct vectors. At the heart of the operation was AI-powered threat research, which enabled the … Read more
The cat-and-mouse game between email scammers and their victims is about to take a dramatic turn. A new open-source tool called ScamBuster, developed by French engineer Laurent Giovannoni, uses artificial intelligence (AI) to “scam the scammers” at scale. Instead of simply deleting phishing emails, ScamBuster engages with attackers using AI-driven human personas, gathering crucial data … Read more
A New Breed of Malware Lets Attackers Choose Their Own Destructive Path In a disturbing development that highlights the evolving tactics of cyber threat actors, researchers have uncovered a novel modular malware that allows attackers to choose how they want to destroy a targeted system. Dubbed GigaWiper, this malware combines multiple malware capabilities into a … Read more
As AI models like Claude Mythos and GPT-5.5 gain widespread attention for their potential in cybersecurity, a new breed of engineers is emerging to shape the future of artificial intelligence security. Dubbed “yellow teams,” these innovators are building both defenses against advanced AI attacks and frameworks that attackers will utilize to carry out those assaults. … Read more