A high-severity vulnerability in Zyxel switches has been exploited to steal sensitive data from nearly 1,000 devices worldwide. The US Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch the flaw immediately, highlighting the significant risks it poses to the federal enterprise. The vulnerability, tracked as CVE-2026-7273, was first disclosed in June … Read more
A new zero-day exploit targeting Windows Defender has been released, allowing malicious actors to block antivirus updates and leave users vulnerable to attacks. The exploit, dubbed BigDiskBuster, was created by Abdelhamid Naceri, a security researcher who has been at odds with Microsoft over their alleged unfair termination last year. Naceri’s tool works on all supported … Read more
A New Wave of Attacks Taps Into Academic Networks via Sophisticated Spear-Phishing Campaigns SideCopy, a threat actor known for targeting Indian organizations with tailored attacks, has expanded its scope to academic institutions in India. The group’s latest campaign utilizes a sophisticated reverse RAT (Remote Access Trojan) called ReverseRAT to infiltrate and compromise sensitive networks within … Read more
A malicious npm package, indexed-btree, has been removed from the public registry after being used in a supply chain attack that exposed sensitive data. The package was downloaded over 1.5 million times before its removal, putting many developers and organizations at risk of identity exposure. Indexed-btree masqueraded as a legitimate database indexing library, but it … Read more
Dragos, a leading provider of industrial control system (ICS) cybersecurity solutions, has completed its acquisitions of NetRise and runZero, following Accenture’s $4.1 billion majority investment in the company earlier this year. This strategic move is part of Accenture’s ambitious OT cybersecurity push, which aims to strengthen the defenses of critical infrastructure operators against increasingly sophisticated … Read more
Noopur Davis’s Unlikely Rise to Global CISO at Comcast In an extraordinary career trajectory, Noopur Davis has risen from a humble software developer to become the global Chief Information Security Officer (CISO) of Comcast, one of the world’s largest media and technology companies. What sets her apart is that she never had a pre-planned career … Read more
Cybersecurity experts are sounding the alarm over a pair of severe vulnerabilities in widely used network devices and software, which hackers are actively exploiting to gain command and system access. The flaws, affecting Zyxel’s firewall appliances and Veeam’s data protection platform, have left thousands of organizations exposed to potential attacks. The common thread between these … Read more
A newly discovered vulnerability in WordPress, known as Comment2Shell, is putting millions of websites and their administrators at risk. The flaw allows an attacker who can inject malicious code through anonymous comments on a site to gain access to administrative sessions, potentially leading to devastating consequences for website security. The Comment2Shell bug is a classic … Read more
A Critical Meta Muse Setting Could Let Attackers Hijack AI Assistants, Exposing Users to Risk A vulnerability in a popular artificial intelligence (AI) assistant has been discovered, allowing potential attackers to exploit it and turn the tool into a backdoor. The issue lies in a seemingly innocuous setting within the AI’s metadata, which could be … Read more
Noopur Davis, the Unlikely Global CISO of Comcast In an extraordinary tale of happenstance and adaptability, Noopur Davis has risen to become one of the world’s most influential cybersecurity leaders without ever planning a career in the field. As the Global Chief Information Security Officer (CISO) at Comcast, she leads multiple security teams across the … Read more