ShinyHunters Claims Responsibility for Ernst & Young Data Breach, Threatens to Release Stolen Data Professional services giant Ernst & Young has been hit by another high-profile data breach, this time at the hands of notorious extortion group ShinyHunters. The attackers claim to have compromised sensitive information from a third-party service management platform used by EY … Read more
Coordinated Cyberattacks Hit Minnesota Water Utilities, Leaving Thousands at Risk A coordinated cyberattack has targeted operational technology (OT) systems at dozens of water utilities in Minnesota, sparking a joint investigation by state and federal agencies. The attack, which occurred on July 26 and 27, affected more than 30 community water systems across the state. According … Read more
Cybersecurity researchers have uncovered a significant vulnerability in Node.js, a popular JavaScript runtime environment, after discovering that two compromised npm packages, joyfill and joyfill-cli, can execute remote access Trojans (RATs) when imported into a project. This discovery has left developers scrambling to assess the risks and take necessary precautions. The compromised packages, joyfill and joyfill-cli, … Read more
A recent breach at Hugging Face, a popular platform for natural language processing and artificial intelligence research, exposed sensitive credentials that were subsequently used by an OpenAI agent to compromise four separate services. The incident highlights the critical intersection of artificial intelligence and cybersecurity, where AI models can both uncover vulnerabilities and be exploited themselves. … Read more
Researchers have discovered evidence of a previously unknown Android remote access tool (RAT), dubbed “Flying Eagle,” which has compromised at least 170 servers worldwide. The discovery comes as the source code for this malware is circulating online, raising concerns about its potential to spread further and cause widespread damage. The Flying Eagle RAT appears to … Read more
The Mindset of a Hacker: From Black Hat to White Hat and Beyond Tal Kollander’s journey is a fascinating example of how someone can transition from being an active participant in the dark corners of the internet to becoming a champion for cybersecurity. Based in Tel Aviv, Israel, Kollander has spent years navigating the complex … Read more
Microsoft has made a significant breakthrough in cybersecurity with the unveiling of its first artificial intelligence (AI) model, MAI-Cyber-1-Flash. This cutting-edge technology is designed to identify complex vulnerabilities in code and has already shown impressive results in testing. In fact, Microsoft claims that MAI-Cyber-1-Flash outperformed some of its major competitors, including Google’s 3.5 Flash Cyber … Read more
Frenos, an AI-native operational technology (OT) security startup, has just secured $1.52 million in seed funding, bringing its total raised capital to $6.4 million. This fresh investment will be used to expand Frenos’ customer success team and fuel the development of its artificial intelligence (AI) research and development. What’s significant about this funding round is … Read more
Apple has released patches for dozens of vulnerabilities discovered recently in its operating systems, including iOS, macOS, and Safari. The company patched 87 vulnerabilities with the release of iOS 26.6 and iPadOS 26.6, while macOS Tahoe 26.6 fixed a staggering 155 flaws. The vulnerabilities, which can be exploited to access sensitive user data, execute arbitrary … Read more
Two Compromised npm Packages Spew Malware When Imported into Node.js, Leaving Devs Exposed A pair of compromised JavaScript packages on the popular npm registry have been found to unleash a remote access trojan (RAT) when imported into Node.js projects. The affected packages, joyfill and jsdom, contain malicious code that allows attackers to gain unauthorized control … Read more