A Silent Threat Lurks in the Shadows of Enterprise AI Systems As cybersecurity professionals, we’re no strangers to the concept of insider threats. We’ve spent years developing robust access controls and monitoring systems to detect and prevent malicious activity from within our own organizations. But what if I told you that a new kind of … Read more
A Newly Uncovered Botnet Implants AI Agents onto Compromised Servers to Steal Credentials Cybersecurity researchers have uncovered a sophisticated botnet that’s using artificial intelligence (AI) agents to carry out attacks on compromised Docker hosts. The botnet, dubbed Carbonato, has been found to implant AI agents onto affected servers, which are then used to send stolen … Read more
A high-severity zero-day vulnerability has been discovered in the TDengine time-series database, used by over 730,000 organizations across various industries, including manufacturing, energy, and automotive. This flaw allows an attacker to crash vulnerable servers with a single specially crafted network packet, highlighting the potential for significant disruptions in critical infrastructure. The vulnerability, tracked as CVE-2026-42542, … Read more
Industrial Control Systems at Risk as Zero-Day Vulnerability Exposes Thousands of Servers A high-severity zero-day vulnerability has been discovered in an open-source database used across various industrial sectors, putting thousands of servers at risk of crashing with a single malicious packet. The flaw affects TDengine, a time-series database widely adopted by organizations in manufacturing, energy, … Read more
Over 16,000 Supabase Databases Expose Sensitive Data Due to Misconfigurations A shocking number of databases built on the popular open-source platform Supabase have been found to be exposing sensitive information, including personally identifiable information (PII), passwords, and authentication tokens. Researchers at UpGuard discovered more than 16,000 misconfigured Supabase databases that contain readable tables with sensitive … Read more
Dutch Police Crack Down on ShinyHunters Hacking Group with High-Profile Arrest In a significant development in the ongoing battle against cybercrime, Dutch police have confirmed that a 24-year-old man has been arrested in connection with the ShinyHunters hacking group. The suspect, identified as Pepijn van der Stap, is no stranger to law enforcement and has … Read more
Major Japanese Car-Sharing Service Times Car Hit by Massive Data Breach Affecting 6.6 Million Users Times Car, a leading vehicle rental and mobility service operated by Park24 Group, has confirmed that approximately 6.6 million user accounts have been compromised in a cyberattack disclosed last week. The incident is one of the largest data breaches to … Read more
Japan’s Keio Railway Hit by Ransomware Attack, Disrupting Business Systems Keio Corporation, one of Japan’s major private railway operators, has confirmed that its network was compromised in a ransomware attack over the weekend. The incident disrupted some of the company’s business systems and forced Keio to shut down its network to prevent further damage. The … Read more
A massive number of organizations have had their AI login credentials stolen, exposing sensitive corporate data to potential hackers. According to a recent report by SOCRadar, over 80,000 corporate domains have been compromised, with some of the biggest names in business among those affected. The study focused on infostealer-driven hijacking of AI sessions, which allowed … Read more
Over 16,000 Supabase Databases Expose Sensitive Data Due to Misconfigurations A recent analysis by cybersecurity researchers at UpGuard has uncovered a staggering number of misconfigured Supabase databases exposing sensitive data. The investigation found that more than 16,000 databases were accessible without proper security measures in place, putting the personal identifiable information (PII), passwords, and authentication … Read more