Cyber Security

WatchGuard Patches Critical Fireware OS Code Injection Vulnerability, Affecting Thousands of Organizations Worldwide In a critical security update issued yesterday, WatchGuard announced patches for 15 vulnerabilities in its Fireware OS operating system, including a high-severity remote code execution (RCE) bug that could allow attackers to execute commands with root privileges on connected appliances. The vulnerability, … Read more

A surge in vulnerability disclosures, driven by AI-powered tools, has significantly altered the landscape of cybersecurity threats. According to Google’s Threat Intelligence Group (GTIG), the number of vulnerabilities disclosed each month has more than doubled this year, with a corresponding increase in exploitation rates. The GTIG report analyzed data from January 2025 through August 2026 … Read more

The US Federal Trade Commission (FTC) has launched a probe into OpenAI and Anthropic, two leading artificial intelligence companies, over concerns that their technology poses risks to consumers. The investigation comes as the AI industry grapples with the potential dangers of its rapidly advancing capabilities. At the heart of this controversy are instances where AI … Read more

Russia-linked threat actor Star Blizzard has significantly expanded its phishing and malware-delivery tactics, making it harder for victims to detect and evade. The group, known for targeting journalists, NGOs, and experts on Ukraine, has abandoned its previous ClickFix strategy in favor of a new technique called RedFlick. This shift allows Star Blizzard to reach even … Read more

A Surprising Paradox Unfolds as AI Reshapes the SOC Career Ladder A new study has shed light on a paradoxical situation unfolding in the world of cybersecurity operations (SOC). While artificial intelligence (AI) detection and response systems are being increasingly adopted to give defenders an edge, they’re also making it harder for security professionals to … Read more

Cybersecurity giants and the White House have reached a critical juncture in the ongoing debate over the safety of artificial intelligence (AI) systems. A voluntary agreement signed by President Donald Trump and six major AI companies, including OpenAI, Google, and Meta, commits these tech behemoths to implementing stronger safeguards around the development of frontier AI … Read more

New ChatGPT Campaign Tricks Users with Custom GPTs, Delivers RATs A sophisticated cyber attack campaign has been uncovered by cybersecurity firm Huntress, which uses customized versions of ChatGPT to trick users into downloading remote access Trojans (RATs). This clever tactic leverages the trust in OpenAI’s and Google’s legitimate domains to direct unsuspecting victims to malicious … Read more

Bitget Crypto Exchange Hit with Record-Breaking Heist Thanks to Zero-Day Flaw in Security Products A devastating cyberattack has left cryptocurrency exchange Bitget reeling after thieves stole a staggering $387.5 million from its systems last week. The breach, which is believed to have been carried out by North Korean hackers, was made possible by exploiting a … Read more

TeamViewer’s Urgent Warning: Patch Critical Flaws Now to Avoid Remote Access Risks In a stark reminder that even popular and widely-used software is not immune to security threats, remote access company TeamViewer has issued an urgent warning to its users, advising them to patch critical vulnerabilities in their client and host software as soon as … Read more

A major boost in security protection for Microsoft’s Entra ID users is on the horizon. Starting next month, all Entra ID sign-ins will be shielded from external script injection attacks, thanks to a significant upgrade to the platform’s Content Security Policy (CSP) defenses. For those unfamiliar with the technical details, let’s break it down: external … Read more