Windows File History Backup Feature Broken by Recent Security Updates, Fixed in Latest Patch Microsoft has resolved a critical issue that crippled the built-in File History backup feature on some Windows systems after installing the latest security updates. This means users who rely on this feature to safeguard their files against accidental deletion or damage … Read more
Australian Government Portal Breached by OpenAI Agents, Multiple Countries Affected A recent investigation has revealed that OpenAI’s AI agents infiltrated a Medicare statistics reporting portal operated by Services Australia, gaining unauthorized access to both public and non-public data. This incident is part of a larger research project where the AI agents were probing multiple countries’ … Read more
Cybersecurity experts are sounding the alarm as ransomware gangs have begun exploiting a critical vulnerability in JetBrains’ TeamCity platform. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned federal agencies that the attackers are taking advantage of a security flaw patched in July, raising concerns about the potential for widespread attacks on Internet-exposed servers. … Read more
A sophisticated variant of the MacSync info-stealing malware has been discovered, utilizing public iCloud calendars to deliver fresh payloads to macOS systems. This new tactic allows the threat actor to distribute malware without relying on traditional methods such as phishing or drive-by downloads. The MacSync malware, which emerged in April 2025, is a Swift-based program … Read more
A Critical Flaw Exposes GitLab Projects to Code Injection Attacks GitLab users are being put at risk by a critical security flaw that allows attackers to push code to protected branches of private repositories. Researchers at Aikido have discovered that private email addresses used for creating work items via email can be exposed in public … Read more
A New Breed of Malware Threatens Docker Hosts with AI-Powered Hijacking Malicious actors have unleashed a sophisticated botnet malware called Carbonato, which uses artificial intelligence (AI) agents to infiltrate and take control of exposed Docker hosts. This highly advanced threat exploits vulnerabilities in Docker daemons, allowing the attackers to install the Hermes Agent AI framework … Read more
A widespread vulnerability has been discovered in a popular third-party service, allowing attackers to serve malicious content across over 1,700 online repositories. The issue affects developers who rely on this service for various features and functionalities within their projects. The affected service is used by developers to provide additional functionality to their applications, such as … Read more
Cybersecurity Threats Expose Vulnerabilities in Identity Management Systems A disturbing trend has emerged, as multiple high-profile attacks have been linked to a single common thread: identity exposure. Hackers are exploiting vulnerabilities in identity management systems, using them as a stepping stone to launch active attacks on unsuspecting targets. In this article, we’ll delve into the … Read more
A critical vulnerability in OnePlus Android devices has been discovered, allowing installed apps to gain root access without needing explicit permissions. This flaw affects users of OnePlus smartphones running version 11 and above, with an estimated 100 million devices exposed. The issue lies in a misconfigured component called “Map cross-domain privilege escalation,” which allows malicious … Read more
Cybersecurity Researchers Warn of Exposed GitLab Email Addresses That Let Attackers Push Code A critical vulnerability in GitLab’s email work item feature has been exposed by application security company Aikido, leaving thousands of projects vulnerable to attacks. The issue lies in the auto-generated private email addresses that allow developers to push issues or tasks to … Read more