Cyber Security

A Novel Proof-of-Concept Exploits Microsoft Defender’s Update Mechanism A sophisticated proof-of-concept (PoC) cyberattack technique has been discovered to silently prevent Windows Defender from receiving updates without exploiting a vulnerability. Dubbed “BigDiskBuster” by researchers, this novel attack allows malicious actors to extend the lifetime of existing malware on compromised machines by blocking Defender updates. Developed by … Read more

BigDiskBuster, a novel proof-of-concept (PoC) cyberattack technique, has been found to prevent Windows Defender from receiving updates without exploiting a vulnerability. Dubbed “BigDiskBuster” by researchers from LevelBlue, this PoC was originally published on September 19 by security researcher Abdelhamid Naceri, who goes by MSNightmare. The technique is capable of leaving Microsoft Defender running while blocking … Read more

As AI adoption surges across industries, a seismic shift is underway in cybersecurity teams. According to new research from IANS, chief information security officers (CISOs) are rethinking their budgets and staffing strategies as artificial intelligence becomes an increasingly crucial factor in defending against threats. Rather than shrinking their teams or relying on automation to replace … Read more

Google’s Internal AI Agent Uncovers 500 Vulnerabilities in Web Apps, Raising Questions About AI-Powered Security A recent revelation from Google has shed light on the company’s internal efforts to bolster its web application security using artificial intelligence (AI). PageBreak, an AI agent developed by Google’s Product Security team, has discovered over 500 cross-site scripting (XSS) … Read more

Critical Healthcare Systems Remain Vulnerable to Quantum-Ready Attacks A recent study has revealed that the healthcare sector is woefully unprepared for the advent of post-quantum cryptography (PQC), leaving sensitive patient data potentially exposed to “harvest now, decrypt later” attacks. Researchers from Forescout Technologies analyzed over 2.5 million devices across more than 50 healthcare delivery organizations … Read more

A critical vulnerability in the Ninja Forms plugin for WordPress has been exploited by hackers, compromising thousands of websites. The attack also affects users of WPC Product Bundles for WooCommerce, another popular plugin with over 30,000 installations. The exploit takes advantage of a stored cross-site scripting (XSS) flaw, which requires an authenticated session to launch. … Read more

As AI adoption accelerates across industries, cybersecurity teams are being forced to rethink their approach to security. New research from IANS suggests that instead of replacing people with machines, CISOs are looking to AI as a way to augment and support their existing teams. The study found that most CISOs aren’t planning to downsize their … Read more

Google’s PageBreak AI Agent Unleashes a Torrent of Flaws in Its Web Apps, Highlighting the Power and Pitfalls of AI-Powered Security In a remarkable display of its own vulnerabilities, Google’s internal AI agent, PageBreak, has identified over 500 cross-site scripting (XSS) flaws in the company’s web applications. This startling discovery serves as a stark reminder … Read more

Critical Healthcare Systems Remain Vulnerable to Quantum-Ready Attacks Healthcare organizations are failing to prepare for the dawn of the post-quantum cryptography era, leaving millions of sensitive patient records and medical imaging data potentially vulnerable to devastating attacks. A recent study by Forescout Technologies analyzed 2.5 million devices across over 50 healthcare delivery organizations and uncovered … Read more

Threat actors have been evolving their tactics to stay one step ahead of security measures. A recent wave of attacks has seen malicious payloads being hidden in plain sight, making it increasingly difficult for victims and security professionals alike to detect early warning signs. ClickFix, a social engineering technique that exploits human trust in software … Read more