A massive data breach has exposed up to 14.2 million email logins at six Japanese internet service providers (ISPs), leaving customers vulnerable to account hijacks and other forms of cyber attacks. The incident, which was disclosed by KDDI Corporation on June 17, involves a vulnerability in an unnamed third-party software used by the company’s email … Read more
A New Version of YARA-X Brings Performance Boosts and Bug Fixes to Security Researchers Security researchers have been waiting for an update to the popular malware detection tool YARA-X, and it’s finally here. The latest versions, 1.18.0 and 1.19.0, bring significant improvements and bug fixes that will make a big difference in their daily work. … Read more
A massive data breach has compromised up to 14.2 million email logins at six internet service providers (ISPs) in Japan, highlighting the ongoing threat of cyber attacks against critical infrastructure and underscoring the importance of robust security measures. The incident, disclosed by Japanese telecommunications operator KDDI Corporation on June 28, involves a breach of one … Read more
A massive network of over 200,000 scam websites has been uncovered by cybersecurity firm Infoblox, all powered by a Chinese open-source framework called Uni-App. This framework is widely used in China for building legitimate applications and websites, but threat actors have exploited its popularity to create a sprawling ecosystem of investment scams that have already … Read more
The education sector is being forced to play catch-up in terms of cybersecurity, with rising threats from third-party actors putting student data at risk. Cybercriminals have long viewed the education sector as a lucrative target due to its mix of legacy technology and new applications, uneven IT resources, and vast amounts of sensitive data. According … Read more
A sophisticated new attack vector has been uncovered by Mozilla’s Zero Day Investigative Network (0DIN) AI security platform, which exploits vulnerabilities in popular agentic coding tools. The technique allows attackers to plant malware on a developer’s device without raising any red flags with security scanners or human reviewers. The attack relies on three seemingly innocuous … Read more
OpenAI’s latest iteration of its GPT language model, GPT-5.6 Sol, has been made available with restricted access and enhanced cyber safeguards. This breakthrough marks a significant step forward for AI-driven cybersecurity, but also raises concerns about the potential risks associated with advanced AI systems. The development of GPT-5.6 Sol is a testament to the rapid … Read more
Ukraine’s intelligence agency has revealed that Russian hackers used a sophisticated tactic to steal messaging credentials from Ukrainian officials, highlighting the growing threat of AI-powered attacks on individuals and organizations worldwide. According to the Ukrainian National Security and Defense Council (NSDC), Russian intelligence operatives sent fake text messages to high-ranking officials in Ukraine, purporting to … Read more
A New Era of Yara Rules Management: Releases 1.18.0 and 1.19.0 Bring Significant Improvements to YARA-X The latest updates to YARA-X, a powerful tool for creating and managing custom malware detection rules, have been released by the development team. YARA-X versions 1.18.0 and 1.19.0 bring a range of enhancements and bug fixes that are set … Read more
Over 200,000 websites have been found to be using a Chinese open-source framework called Uni-App, which is being exploited by threat actors to power massive investment scam operations. According to cybersecurity firm Infoblox, these scams are linked to the same cluster of activity and share patterns in growth and domain registration, suggesting a centralized owner … Read more