A New Era in AI-Driven Work Forces a Reevaluation of Security Models As we navigate the rapidly evolving landscape of artificial intelligence (AI) in the workforce, it’s becoming increasingly clear that our current security models are no longer sufficient. The latest development in this space is the emergence of “true” AI coworkers – persistent, agentic … Read more
A staggering number of valid login credentials has been exposed in public GitHub repositories, leaving countless users vulnerable to unauthorized access and potential identity theft. A recent investigation by cybersecurity researchers uncovered over 543,000 compromised user credentials, which were found to be still active in July despite GitHub’s attempts to mitigate such leaks. The alarming … Read more
A sophisticated cyberattack on a Dutch cybersecurity nonprofit has shed light on the evolving threat landscape of AI-driven network breaches. The Dutch Institute for Vulnerability Disclosure (DIVD) recently revealed that its own network was compromised by exploiting a chain of two zero-day vulnerabilities in the open-source Zammad ticketing system. The attack, which DIVD described as … Read more
A wave of dual-RMM phishing attacks is sweeping across the globe, with attackers exploiting a vulnerability in MSP360’s integration with ScreenConnect to gain unauthorized access to businesses’ internal networks. The compromised systems are then used as a springboard for further reconnaissance and lateral movement, putting sensitive data at risk. The scheme involves attackers leveraging a … Read more
A critical vulnerability in Zimbra, a widely-used email server software, has been exploited by attackers to deploy web shells and harvest authentication secrets, compromising the security of thousands of organizations worldwide. The attack vector leverages a previously undisclosed flaw that allows malicious actors to pivot across domains, creating a pathway for further exploitation. The affected … Read more
Over 543,000 valid credentials exposed in public GitHub repositories have been left vulnerable despite the platform’s security measures. Truffle Security conducted a comprehensive scan of 224 million repositories and 58 billion files, revealing that more than half a million unique credentials were publicly accessible for an average of nearly two years. The researchers found that … Read more
A New Twist on Old Tricks: ChatGPT Custom GPTs Used to Deliver RAT via ClickFix Lures Attackers have found a new way to deliver malicious Remote Access Trojans (RAT) by exploiting vulnerabilities in custom-built Generative Pre-trained Transformers (GPT) models, specifically those created using the popular AI platform ChatGPT. These sophisticated phishing lures, known as “ClickFix,” … Read more
Cisco has issued a warning about attackers exploiting a critical authentication bypass vulnerability in its SD-WAN (Software-Defined Wide Area Network) Manager. The flaw, which allows unauthenticated access to sensitive network configuration data, has been actively exploited by malicious actors, putting numerous organizations at risk. The vulnerability, identified as CVE-2026-1234, affects the SD-WAN Manager’s web-based interface, … Read more
Cybersecurity experts have sounded the alarm on a new wave of phishing attacks that exploit vulnerabilities in remote monitoring and management (RMM) software, specifically MSP360 and its ScreenConnect component. These dual-RMM phishing attacks allow attackers to gain unfettered access to an organization’s internal networks, highlighting the need for enhanced security measures. The attacks work by … Read more
**Malicious Actors Exploit Zimbra Vulnerability, Leaving Thousands of Organizations Exposed** A critical vulnerability in the popular email server software Zimbra has been exploited by attackers to deploy web shells and harvest authentication secrets, putting thousands of organizations worldwide at risk. The exploit, which leverages a flaw in the way Zimbra handles authentication tokens, allows hackers … Read more