A Small Minority of AI Users Pose a Huge Security Risk, New Research Reveals A disturbing trend has emerged in the world of artificial intelligence (AI) security, where only 5% of users are responsible for nearly all cybersecurity breaches. These individuals, often referred to as “superusers,” have inadvertently created backdoors into their organizations’ systems through … Read more
A sophisticated cyberattack campaign has been uncovered, targeting the Myanmar government and its IT sector with a particularly nasty backdoor malware. Dubbed Operation QUICSILVER, this espionage effort leverages a custom-built tool called QUICAgent to infiltrate and maintain access to compromised systems. The attackers’ goal is clear: they’re after sensitive information, likely related to national security … Read more
A Critical Flaw in Keycloak Exposes Millions of Users to Account Takeover Attacks A severe vulnerability has been discovered in Keycloak, a popular open-source identity and access management platform used by millions of organizations worldwide. The flaw, which allows unauthenticated attackers to reset passwords for any account, poses a significant risk to the security of … Read more
Shipping Companies Left Exposed as AI Code and Identity Exposure Create Breach Routes A recent wave of cyber attacks has highlighted a critical vulnerability in the shipping industry, where companies are struggling to keep pace with the rapid deployment of artificial intelligence (AI) code. As these organizations rely increasingly on AI-driven systems to optimize logistics … Read more
A Venezuelan national has been handed a record-breaking 8-year prison sentence for his role in a massive ATM jackpotting scheme that caused over $3.5 million in losses, marking one of the longest federal sentences imposed on an individual involved in this type of cybercrime. Juan Manuel Gouveia-Aguilera, 27, was sentenced to 96 months in prison … Read more
A massive patch update has been released by Broadcom to address a staggering 91 vulnerabilities in its Spring application development framework. The update is crucial, as it affects more than 200,000 software components across various projects, including Spring Security and AI tools. This is not just a routine patch release – the surge in vulnerabilities … Read more
Windows 11 Gaming Issues Spark Temporary Fix from Microsoft A growing number of gamers have been plagued by frustrating and unexplained issues with their favorite titles on Windows 11, causing games to crash or fail to launch. Microsoft has finally stepped in to provide a temporary fix for these problems, which have affected users who … Read more
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning to federal government agencies, requiring them to patch a critical vulnerability in Zimbra Collaboration Suite (ZCS) within three days. This latest development comes as part of an ongoing effort to combat cyber threats targeting organizations that rely on the popular email and … Read more
A highly sophisticated and highly damaging malware campaign has been uncovered, leveraging artificial intelligence (AI) to scale massive server attacks. Dubbed UAT-10147, this threat uses a range of sophisticated tactics to evade detection and wreak havoc on vulnerable systems. The good news is that security experts have already sounded the alarm; the bad news is … Read more
A Clever Malware Trick: DOUBLECUP’s PNG Payload Exploit Cybersecurity researchers have been sounding the alarm about a new malware campaign that uses a clever trick to deliver its payload. The malware, known as DOUBLECUP, disguises itself as an innocent PNG image file but contains a hidden PowerShell script that can wreak havoc on Windows systems. … Read more