Cyber Security

Gunra Ransomware Exploits Critical Flaws in Fortinet and Schneider Electric Devices, Breaching Networks Worldwide In a concerning wave of cyberattacks, Gunra ransomware has been linked to breaches across multiple industries, leveraging critical vulnerabilities in network security devices from Fortinet and Schneider Electric. The attacks have left organizations scrambling to contain the damage, with some still … Read more

Malicious MCP Servers Can Hijack AI Coding Agents, Exfiltrate Sensitive Data A disturbing trend has emerged in the cybersecurity landscape, where malicious servers are exploiting vulnerabilities in machine learning (ML) and artificial intelligence (AI) coding agents to exfiltrate sensitive data. This sophisticated threat vector involves compromised Multi-Cloud Platform (MCP) servers that can split instructions to … Read more

A Critical Flaw in Windows 11 Enables Full System Takeover via USB Drive Researchers have discovered a serious vulnerability in Windows 11 that allows an attacker to take full control of a system simply by inserting a malicious USB drive. The flaw, which resides in the operating system’s autorun feature, can be exploited remotely and … Read more

A Stealthy Threat Lurks in AI Accelerators and Neo-Clouds: Cybersecurity Blind Spots Exposed The rapid growth of artificial intelligence (AI) has led to a surge in the adoption of specialized chips known as accelerators, which are designed to speed up AI workloads. These accelerators are being used in conjunction with a new type of cloud … Read more

OpenAI’s Astra Model Sparks Concerns Over Autonomous Cyberattacks A new AI model developed by OpenAI, called Astra, has been flagged as a potential cybersecurity risk due to its advanced capabilities in creating autonomous cyberattacks. The company has taken steps to mitigate this threat, but the incident highlights the growing concern of AI-powered attacks on real-world … Read more

Mozilla has taken swift action to address a potential security vulnerability after accidentally exposing its GPG signing subkey in a GitHub repository. The exposed key could have allowed an attacker to create malicious versions of Firefox and Thunderbird software that appeared authentic, but several factors mitigate the impact. The GPG (GNU Privacy Guard) private signing … Read more

A New Type of Supply Chain Attack Threatens WordPress Sites: Meet BdThemes In a disturbing example of how malicious actors can compromise even the most seemingly secure systems, a recent supply chain attack has left hundreds of WordPress sites vulnerable to takeover by rogue administrators. The culprit behind this breach is a theme supplier called … Read more

A devastating cyberattack on a Polish power plant has left experts scrambling to understand the scale of the damage. Hackers breached the facility’s control systems via its private cellular network, shutting down a critical turbine and potentially putting the entire grid at risk. The attack is believed to have been carried out through a vulnerability … Read more

As OpenAI’s highly anticipated Astra model edges closer to release, the company has hit the brakes on internal development due to concerns over its potential for autonomous cyberattacks. According to recent evaluations, Astra has made significant strides in agentic coding and cybersecurity capabilities, putting it squarely in the crosshairs of a “critical” risk threshold. Under … Read more

Mozilla has issued a new GPG signing subkey used for some Firefox and Thunderbird artifacts after the previous key was accidentally exposed in a GitHub repository. This is a significant development in the world of cybersecurity, where the exposure of a private signing key can create a supply chain attack risk. When a private signing … Read more