545 Hackers Tested It First. Now XRanges for AI Scores Your Security Agent

As hackers continue to push the boundaries of innovation in cyber attacks, a new threat has emerged that combines artificial intelligence with real-world reconnaissance. The platform, called XRanges, has been quietly testing its capabilities with 545 hackers, who were tasked with identifying vulnerabilities and weaknesses in security systems. XRanges uses AI-powered algorithms to analyze vast … Read more

New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control

A severe vulnerability has been discovered in cPanel, a popular web hosting control panel used by millions of websites worldwide. The flaw, which allows an attacker to run code as root and gain full control over the server, has significant implications for web hosting providers and their clients. The issue lies in cPanel’s architecture, specifically … Read more

Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

A Critical Flaw in MemTensor Packages Exposes Thousands of Developers to Credential Theft via npm and PyPI A severe vulnerability has been discovered in several popular MemTensor packages, which are widely used in the development community for their machine learning capabilities. The flaw, dubbed sckit, allows attackers to steal sensitive credentials from unsuspecting developers who … Read more

This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move

A Windows Malware Variant Leverages AI-Powered Decision Making, Escalating Threat Potential In a disturbing example of malware evolution, researchers have uncovered a Windows-based threat that incorporates artificial intelligence (AI) to make its next moves. Dubbed “Tactic,” this advanced malware strain allows up to four different AI models to vote on its course of action, significantly … Read more

Ryuk ransomware member sentenced to 24 months in prison

A notorious figure in the world of cybercrime has been brought to justice. Karen Serobovich Vardanyan, a 35-year-old Armenian man known online as “Maneeken” or “Karl Lagerfeld,” was sentenced to 24 months in prison and three years of supervised release for his role in Ryuk ransomware attacks that targeted U.S. companies between March 2019 and … Read more

Microsoft: September Windows updates break Always On VPN connections

Microsoft’s Latest Windows Updates Cause Major Issues with Always On VPN Connections IT administrators around the world are facing a major headache after Microsoft’s latest set of security updates for Windows 11 caused Always On VPN connections to malfunction. The issue, which affects both home and enterprise users, has left many struggling to connect to … Read more

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

Chinese hackers have unleashed a sophisticated attack on unsuspecting Windows users, exploiting a previously unknown vulnerability in Google’s Chrome browser to deploy the CLEANGULP malware. This zero-day chain allows attackers to gain control over compromised systems, creating a pathway for further breaches and potentially catastrophic consequences. The attackers’ modus operandi involves targeting vulnerabilities in the … Read more

F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers

A critical zero-day vulnerability in F5’s BIG-IP Application Delivery Controller (ADC) has been exploited, granting attackers unauthenticated remote code execution on OAuth servers. This security flaw affects a staggering number of organizations worldwide, making it an urgent matter for IT teams to patch their systems immediately. The vulnerability, designated as CVE-2026-0001, resides in F5’s BIG-IP … Read more