A landmark agreement signed by six major tech giants and President Donald Trump this week marks a significant step towards ensuring the safety of emerging artificial intelligence (AI) systems. The voluntary White House Accord on Super Intelligence calls for companies to establish internal controls, subject them to independent audits, and give their boards greater oversight … Read more
Cyber Attackers Abusing ChatGPT Domain to Deliver Malicious Remote Access Trojans A new wave of cyber attacks is exploiting the popularity of OpenAI’s ChatGPT, with threat actors creating malicious customized versions of the chatbot to trick users into downloading remote access Trojans (RATs). According to cybersecurity firm Huntress, this campaign has already affected dozens of … Read more
TeamViewer Issues Urgent Warning Over High-Severity Vulnerabilities Affecting Millions of Users Remote access software company TeamViewer has issued a stark warning to its customers, urging them to update their systems as soon as possible to prevent potential exploitation of high-severity vulnerabilities. The issue affects the client and host software used by millions worldwide for remote … Read more
As of October this year, users of Microsoft’s Entra ID identity and access management solution will enjoy improved protection against a type of cyber threat known as script injection attacks. This means that malicious actors attempting to inject code into websites to steal credentials will be thwarted by enhanced security measures enforced by the company. … Read more
Russian State Hackers Unleash New Malware Installation Tactic: What You Need to Know A sophisticated group of Russian state hackers has been using a novel technique called RedFlick to deploy malware on unsuspecting computers. Dubbed Star Blizzard, this threat actor has been making headlines for its innovative approach to cyber attacks, and the latest tactic … Read more
A New Era in AI-Driven Work: The Rise of Persistent Coworkers Challenges Traditional Security Models As we continue to navigate the rapidly evolving landscape of artificial intelligence (AI) in the workplace, a fundamental shift is underway. We’re no longer dealing with session-scoped chats or task-scoped agents, but rather truly persistent coworkers that are pushing the … Read more
A Critical Zero-Day Exploit Puts SD-WAN Networks at Risk Cisco has issued a critical security update to address a zero-day vulnerability in its Catalyst SD-WAN Manager software. Attackers are actively exploiting this flaw to gain admin privileges on vulnerable systems, and Cisco is urging customers to upgrade to the latest fixed release as soon as … Read more
A Critical Flaw in MikroTik RouterOS Leaves Devices Vulnerable to Remote Code Execution and Denial-of-Service Attacks The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning about a vulnerability in MikroTik RouterOS that could allow an attacker to execute code remotely or cause a denial-of-service condition on affected devices. The flaw, tracked … Read more
A devastating AI-driven network breach was recently uncovered by the Dutch Institute for Vulnerability Disclosure (DIVD), a nonprofit organization that specializes in identifying and mitigating cybersecurity threats. The attack, which has left experts reeling, was made possible by exploiting two zero-day vulnerabilities in the open-source Zammad ticketing system. Zammad is an AI-powered helpdesk and support … Read more
Russian State Hackers Leverage RedFlick Technique to Deliver Malware A new wave of sophisticated cyber attacks has been unleashed by the Russian state actor Star Blizzard, exploiting a technique dubbed “RedFlick” to deploy its signature CosmicPulse backdoor. This latest tactic marks a significant evolution in the threat actor’s arsenal, enabling them to automate attacks and … Read more