Chinese Hackers Impersonate US Officials for AI Cyber Espionage

Chinese Hackers Unleash Sophisticated AI Cyber Espionage Campaign Against US Experts A sophisticated cyber espionage campaign has been uncovered, in which Chinese hackers impersonated high-ranking US officials to steal sensitive information from experts working on artificial intelligence (AI) policy. The campaign, attributed to the China-aligned threat actor TA419, demonstrates a new level of sophistication in … Read more

ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes

A New Threat Erupts: ClingSTUN Turns Vulnerable IoT Devices into Proxy Nodes, Exposing Enterprises to Malicious Activity Researchers have uncovered a sophisticated new malware strain, dubbed “ClingSTUN,” that is turning vulnerable Internet of Things (IoT) devices into proxy nodes for malicious activity. This malware exploits 24 known flaws in a wide range of IoT devices, … Read more

Rejetto HFS servers now actively scanned for critical RCE flaw

A Critical Flaw in Rejetto HFS Servers is Being Actively Scanned by Hackers Hackers have been spotted actively scanning for a critical vulnerability in Rejetto HFS servers, which allows them to gain full administrative access and execute remote code on compromised systems. The weakness, tracked as CVE-2026-61500, was first identified in July this year and … Read more

OpenAI is adding invisible watermarks to ChatGPT and Codex text in the EU

As OpenAI continues to push the boundaries of artificial intelligence, the company has announced that it will be adding invisible watermarks to text generated by its popular ChatGPT and Codex models in the European Union. This move aims to combat the growing concern of AI-generated content being used for malicious purposes, such as spreading misinformation … Read more

tenfold CE: Our free Identity Governance tool just got 2 new features

As small and medium-sized businesses continue to struggle with identity governance and administration (IGA), a free solution has just become more appealing. Tenfold’s Community Edition, which offers full-featured IGA to organizations under 150 users, has gained two new features that significantly enhance its capabilities. One of the biggest challenges for IT teams is managing access … Read more

South Korea probes bank breaches amid suspected AI-powered attacks

South Korea’s Financial Services Commission has convened an emergency meeting to address a series of high-profile cyberattacks targeting major banks in the country. The breach at Shinhan Bank, which exposed sensitive information for over 25,000 customers, is particularly concerning, and officials suspect that artificial intelligence (AI)-powered attacks may be involved. The affected banks are among … Read more

IQVIA fined $7.8 million for failing to properly anonymize health data

Italian authorities have slammed multinational healthcare analytics firm IQVIA with a hefty $7.8 million fine for its failure to properly anonymize sensitive patient data, potentially putting around one million individuals at risk of identification and re-identification. IQVIA, which boasts operations in over 100 countries and handles an astonishing 68 petabytes of health-related data – roughly … Read more

Rejetto HFS servers now actively scanned for critical RCE flaw

A Critical Flaw in Rejetto HFS Servers is Now Being Actively Scanned by Hackers In a concerning development, hackers have started actively scanning for a critical remote code execution (RCE) flaw in Rejetto HFS servers. This weakness, tracked as CVE-2026-61500, allows attackers to forge session cookies, take control of accounts, and execute malicious code on … Read more

Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users’ Mailboxes

A critical vulnerability in Microsoft Exchange has been discovered, allowing authenticated attackers to access and read other users’ mailboxes with ease. The flaw, which affects all supported versions of Exchange Server, poses a significant threat to organizations that rely on the platform for email communication and collaboration. The issue stems from an incorrect implementation of … Read more

Alleged dev of Ploutus ATM malware appears in US court after arrest

A High-Profile Arrest Shakes Up the Cybercrime Scene as Alleged Developer of Ploutus Malware Faces Justice In a major blow to transnational cybercrime, Anibal Alexander Canelon Aguirre, known online as “Prometheus” and “The Engineer,” has been arrested in connection with developing and deploying the notorious Ploutus malware. The 50-year-old is alleged to have led a … Read more