Cybersecurity Nonprofit DIVD Falls Victim to Rare AI-Driven Attack A Dutch nonprofit organization dedicated to identifying and mitigating cybersecurity threats has suffered an unprecedented breach at the hands of an automated artificial intelligence (AI) agent. The Dutch Institute for Vulnerability Disclosure (DIVD), a collective of volunteer security researchers, was compromised in what it describes as … Read more
Malicious npm Packages Expose Developers’ WhatsApp Accounts to Unauthorized Groups A disturbing discovery has been made in the world of open-source software development, where 101 malicious packages were found on the popular npm registry. These packages, designed for JavaScript developers, secretly added unsuspecting users’ WhatsApp accounts to unauthorized groups without their consent. The revelation raises … Read more
Critical Flaw in Kiteworks Platform Exposed During Precautionary Shutdown, Prompting Rapid Fix A potentially disastrous security incident was averted when a nine-hour precautionary shutdown of the Kiteworks platform revealed a critical flaw that could have led to devastating consequences. The bug, which has been described as an “identity exposure” vulnerability, had the potential to unlock … Read more
A New Wave of ClickFix Attacks Leverages ChatGPT Custom GPTs to Dupe Victims into Executing Malicious Code Cybersecurity firm Huntress has uncovered a disturbing trend in which hackers are using personalized versions of the popular chatbot platform, ChatGPT, to launch sophisticated phishing attacks on unsuspecting victims. Dubbed “ClickFix,” this campaign involves creating custom ChatGPT instances … Read more
Reco Secures $55 Million to Tackle Agentic Security Risks A major investment in cybersecurity has been announced, with Reco, a New York-based agentic security firm, securing $55 million in a strategic funding round. The injection of capital brings Reco’s total raised to $140 million and underscores the growing importance of managing AI agent interactions within … Read more
Apple has just released critical security patches to fix a serious vulnerability in its CoreGraphics framework, which was exploited by sophisticated attackers in targeted attacks on iOS devices. The flaw, tracked as CVE-2026-20700, is an out-of-bounds write weakness that could allow hackers to crash apps, corrupt data, or even gain remote code execution on vulnerable … Read more
A Vietnamese National’s Arrest Highlights the Rise of “Pig Butchering” Crypto Scams In a significant development that underscores the growing threat of cryptocurrency investment scams, a 37-year-old Vietnamese national has been charged with money laundering for his role in a massive “pig butchering” scheme. The scam, which defrauded a single victim out of $16 million … Read more
As threats continue to escalate, businesses are grappling with the reality that conventional Identity Governance is no longer enough to safeguard identities. With attackers moving at lightning speed and leveraging increasingly sophisticated tactics, organizations need real-time insight into identity events to stay secure. In today’s complex threat landscape, identities serve as the first line of … Read more
Cyberattacks are becoming increasingly sophisticated and automated, testing an organization’s security maturity like never before. To stay ahead of these emerging threats, it’s essential to treat resilience as a dynamic operational objective that requires constant attention. Artificial Intelligence (AI) is playing a significant role in the evolution of cyberattacks. AI-powered tools are automating key components … Read more
A New Era of Identity Risk Erupts as Autonomous AI Agents Gain Widespread Access Rig Security, a Tel Aviv-based startup, has emerged from stealth with $12 million in seed funding and an identity protection platform designed specifically for the agentic era. Founded by Guy Kozliner, a former member of the CTO team at Wiz, Rig … Read more