A massive backdoor campaign targeting thousands of WordPress sites has come to light, courtesy of an exposed hacker server that’s been leaking sensitive data online. The revelation sheds light on the WP-SHELLSTORM malware, a sophisticated piece of code designed to grant malicious actors unfettered access to compromised websites. At its core, WP-SHELLSTORM is a type … Read more
A Major Overhaul: Lumen Technologies Ditches Legacy Exposure Management for AI-Powered Solution Lumen Technologies, a leading provider of network infrastructure and cybersecurity services, has undergone a significant transformation in its exposure management strategy. The company has abandoned its legacy system, which initially identified 17,000 potential vulnerabilities, in favor of an AI-driven solution that now detects … Read more
A Critical Flaw in XQUIC Puts HTTP/3 Servers at Risk of Catastrophic Failure A high-severity vulnerability, dubbed XRING, has been discovered in the XQUIC protocol, which underlies the emerging HTTP/3 internet standard. The flaw allows remote clients to crash servers handling HTTP/3 traffic, potentially causing widespread service disruptions and data losses. The XRING issue arises … Read more
Researchers have uncovered a novel attack technique that exploits the tendency of AI assistants to “hallucinate” or make incorrect assumptions when faced with incomplete information. Dubbed “HalluSquatting,” this method leverages the fact that AI tools often generate fictional repository or package names in response to requests for popular resources, allowing attackers to pre-register these fake … Read more
A Sophisticated Wiper Malware, GigaWiper, Allows Threat Actors to Combine Destructive Capabilities with Espionage-Grade Backdoor A highly advanced malware, dubbed GigaWiper, has been used by a threat actor for over eight months to devastating effect. According to Microsoft, the malware combines multiple system-level sabotage capabilities with robust command-and-control (C&C) features, making it a formidable tool … Read more
A former employee of cybersecurity incident response company DigitalMint has been sentenced to four years in prison for his role in orchestrating BlackCat (ALPHV) ransomware attacks that targeted US companies, resulting in significant financial losses and compromising sensitive data. Angelo Martino, 41, was part of a group that collected at least $300 million in ransom … Read more
A notorious ransomware negotiator has been sentenced to 70 months in prison for his role in facilitating BlackCat attacks on unsuspecting victims. The sentencing of this individual serves as a stark reminder of the escalating threat posed by ransomware, and the need for organizations to prioritize cybersecurity measures. The convicted individual acted as a middleman … Read more
A massive cryptocurrency heist has unfolded, with attackers exploiting a previously unknown vulnerability in popular software tools used by wallet providers to drain an estimated $3.1 million from unsuspecting users’ digital wallets. The “Ill Bloom” vulnerability, as it’s come to be known, highlights the increasingly sophisticated tactics employed by cybercriminals and underscores the urgent need … Read more
A 15-year-old Linux vulnerability has finally been patched, but not before it earned its discoverers a significant bug bounty reward. The flaw, tracked as CVE-2026-43499 and dubbed “GhostLock,” affects all major Linux distributions since 2011. Nebula Security’s technical analysis reveals that the issue lies in a helper function designed to clean up after a task … Read more
A massive data breach at Japanese telco KDDI has compromised the sensitive information of over 12 million individuals. The incident occurred on June 17 when hackers exploited a zero-day vulnerability in software used by five internet service providers (ISPs) that rely on KDDI’s email infrastructure. The affected ISPs include STNet, JCOM, Chubu Telecommunications, NIFTY, and … Read more