Mozilla’s Linux Signing Key Revoked Amid Security Concerns Mozilla has taken a drastic measure to protect its users by revoking the Linux signing keys used for Firefox and Thunderbird, two of the most widely-used browsers on Linux systems. This decision comes after it was discovered that the private key had been uploaded to a public … Read more
A recently disclosed vulnerability in cellular IoT devices has revealed a shocking truth: malicious SIM cards can secretly run attacker code inside the modems that power these devices. This means that hackers can gain control over the very foundation of IoT networks, exploiting vulnerabilities that could have far-reaching consequences for individuals and organizations alike. The … Read more
OpenAI’s New AI Model Exposes Users to Increased Cyber Risk A recent launch by OpenAI, GPT-5.6-Cyber, has sparked concerns among cybersecurity experts due to its reduced safeguards for exploit development. This new AI model is designed to facilitate research and testing of cyber vulnerabilities, but in doing so, it may inadvertently put users at a … Read more
A sophisticated ransomware gang known as Gunra has been making headlines in recent months due to its targeted attacks on government agencies and critical infrastructure organizations worldwide. In a joint advisory issued by US federal agencies and South Korea’s National Policy Agency, it was warned that Gunra is using a malware variant based on the … Read more
A pair of high-severity vulnerabilities affecting ClamAV, a widely-used open-source antivirus engine, have been disclosed by Cisco. The flaws, which were found in the ZIP archive parser, can be exploited to crash the scanning process and deny service (DoS) attacks, and proof-of-concept exploit code is already publicly available. The two vulnerabilities, tracked as CVE-2026-20337 and … Read more
A devastating wave of ransomware attacks is sweeping across the globe, targeting organizations with a previously unknown exploit that leverages vulnerabilities in Fortinet and Schneider Electric security products. Gunra Ransomware, a highly aggressive malware strain, has successfully breached networks of multiple companies, leaving a trail of destruction and financial loss in its wake. At the … Read more
Cybersecurity experts have sounded the alarm about a new threat vector that leverages malicious MCP servers to compromise sensitive information. The attack involves splitting instructions on these servers to make AI coding agents exfiltrate secrets, posing a significant risk to organizations and individuals with sensitive data. What’s most concerning is that this vulnerability can be … Read more
A new attack vector has emerged, allowing hackers to compromise Windows 11 systems with a single USB drive. Researchers have discovered a vulnerability in the operating system’s auto-install feature for unsigned drivers, which can be exploited to gain complete control over a targeted machine. This flaw affects all versions of Windows 11 and poses a … Read more
Cisco has issued a warning about two high-severity vulnerabilities affecting ClamAV, an open-source antivirus engine widely used to scan files for malware. The flaws allow unauthenticated attackers to crash the ClamAV scanning process in denial-of-service (DoS) attacks, and proof-of-concept exploit code is already publicly available. The security issues were discovered in the ZIP archive parser … Read more
A devastating cyberattack on a Polish power plant has left industry experts reeling, as hackers exploited a private cellular network to gain control of critical systems and shut down a turbine. The attack, which occurred in late July 2026, raises serious concerns about the vulnerability of industrial control systems (ICS) and highlights the need for … Read more