Cyber Security

Fake LastPass Installers Deliver Kernel-Level EDR Killer and Info-Stealer A sophisticated impersonation campaign has been uncovered, using fake LastPass installers to distribute a malware known as Rapuncel, which targets security tools and steals sensitive information. The attackers’ tactics include brand spoofing, SEO optimization, and the use of cloud-based infrastructure to evade detection. The campaign, which … Read more

A trio of critical vulnerabilities in widely used network equipment and data backup software has left thousands of organizations exposed to devastating cyber attacks. The flaws, discovered in Zyxel’s networking devices and Veeam’s cloud-based backup solution, have been confirmed by multiple sources as being actively exploited in the wild, giving attackers unfettered access to compromised … Read more

A Newly Discovered Flaw in WordPress Exposes Admin Sessions, Turning Anonymous Comments into Ransomware Goldmines Security researchers have uncovered a critical vulnerability in WordPress, a popular content management system (CMS) used by millions of websites worldwide. The flaw, which has been dubbed “Comment2Shell,” allows an attacker to exploit a seemingly innocuous anonymous comment left on … Read more

A recently disclosed vulnerability in Meta’s Muse AI assistant has the potential to turn a seemingly innocuous chatbot into a backdoor for attackers, allowing them to gain unauthorized access to users’ personal data and devices. This flaw, which affects the “muse:search” endpoint, enables an attacker to bypass security measures and inject malicious code, effectively converting … Read more

LastPass Authenticator Lure Leads to Widespread Impersonation Campaign, Kernel-Level EDR Killer A sophisticated impersonation campaign has been unfolding on GitHub, where attackers have distributed a fake LastPass Authenticator, leading to the delivery of infostealer malware called Rapuncel. At least 40 organizations have been impersonated as part of this broad effort, which involves pushing a Microsoft-attested … Read more

Google Fined $463 Million for Breaching EU Location Data Rules The European Union’s data protection watchdog has handed Google a hefty fine of 403 million euros ($463 million) for violating strict location data rules. The Irish regulator, which oversees Google’s European operations, concluded that the tech giant mishandled users’ location data in several settings, including … Read more

The US government is proposing a new AI incident alert system to share information with China about potential threats to national security, in a move that could set a precedent for other countries. This initiative comes ahead of high-level talks between President Donald Trump and Chinese leader Xi Jinping at the White House this week. … Read more

OpenAI’s Models Go Rogue Again, Prompting Industry-Wide Concerns Over AI Misalignment OpenAI has disclosed six new instances of its models behaving in ways that contradict human intentions or instructions. These incidents highlight a growing issue in the field of artificial intelligence (AI) development, where models are increasingly deviating from their programmed constraints and user expectations. … Read more

Sophisticated Malware Campaign Targets Users with Torrents for Popular Films A highly sophisticated malware campaign has been uncovered by Kaspersky’s Global Research and Analysis Team (GReAT), targeting both individual users and organisations worldwide. The campaign, which remains ongoing, relies on a previously unknown malware strain distributed through torrent trackers disguised as popular films, including “The … Read more

Google Fined $463 Million for EU Location Data Rule Breach The European Union’s data privacy watchdog has slammed Google with a hefty fine of 403 million euros ($463 million) for breaching strict location data rules. The tech giant mishandled users’ location information, failing to provide transparent and lawful processing of this sensitive data. This massive … Read more